type=PROCTITLE msg=audit(1421337776.416:125): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421337839.997:126): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=15689 comm="apparmor_parser" type=AVC msg=audit(1421337839.997:126): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=15689 comm="apparmor_parser" type=AVC msg=audit(1421337839.997:126): apparmor="STATUS" operation="profile_replace" name="third_party" pid=15689 comm="apparmor_parser" type=SYSCALL msg=audit(1421337839.997:126): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=e94bc0 a2=f3db a3=7fffb3c2dd40 items=0 ppid=15685 pid=15689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421337839.997:126): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421337872.515:127): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=15729 comm="apparmor_parser" type=AVC msg=audit(1421337872.515:127): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=15729 comm="apparmor_parser" type=AVC msg=audit(1421337872.515:127): apparmor="STATUS" operation="profile_replace" name="third_party" pid=15729 comm="apparmor_parser" type=SYSCALL msg=audit(1421337872.515:127): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1b63bc0 a2=f3db a3=7fffe2f26de0 items=0 ppid=15725 pid=15729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421337872.515:127): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421337901.226:128): pid=15747 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421337901.226:129): pid=15747 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421337901.226:130): pid=15747 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3 res=1 type=USER_START msg=audit(1421337901.226:131): pid=15747 uid=0 auid=0 ses=3 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421337901.226:132): pid=15747 uid=0 auid=0 ses=3 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421337901.226:133): pid=15747 uid=0 auid=0 ses=3 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421337934.464:134): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=15772 comm="apparmor_parser" type=AVC msg=audit(1421337934.464:134): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=15772 comm="apparmor_parser" type=AVC msg=audit(1421337934.464:134): apparmor="STATUS" operation="profile_replace" name="third_party" pid=15772 comm="apparmor_parser" type=SYSCALL msg=audit(1421337934.464:134): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=8ffbc0 a2=f3db a3=7fffe6d97b30 items=0 ppid=15767 pid=15772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421337934.464:134): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421337996.449:135): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=15813 comm="apparmor_parser" type=AVC msg=audit(1421337996.449:135): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=15813 comm="apparmor_parser" type=AVC msg=audit(1421337996.449:135): apparmor="STATUS" operation="profile_replace" name="third_party" pid=15813 comm="apparmor_parser" type=SYSCALL msg=audit(1421337996.449:135): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=17eabc0 a2=f3db a3=7fff368f08b0 items=0 ppid=15809 pid=15813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421337996.449:135): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_START msg=audit(1421338031.220:136): pid=15847 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_END msg=audit(1421338043.159:137): pid=15847 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421338058.198:138): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16098 comm="apparmor_parser" type=AVC msg=audit(1421338058.198:138): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16098 comm="apparmor_parser" type=AVC msg=audit(1421338058.198:138): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16098 comm="apparmor_parser" type=SYSCALL msg=audit(1421338058.198:138): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2113bc0 a2=f3db a3=7fff6dfbf080 items=0 ppid=16094 pid=16098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338058.198:138): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_START msg=audit(1421338074.825:139): pid=16123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_END msg=audit(1421338074.845:140): pid=16123 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421338090.853:141): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16164 comm="apparmor_parser" type=AVC msg=audit(1421338090.853:141): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16164 comm="apparmor_parser" type=AVC msg=audit(1421338090.853:141): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16164 comm="apparmor_parser" type=SYSCALL msg=audit(1421338090.853:141): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1d56bc0 a2=f3db a3=7fffbad8e470 items=0 ppid=16159 pid=16164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338090.853:141): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338123.263:142): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16192 comm="apparmor_parser" type=AVC msg=audit(1421338123.263:142): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16192 comm="apparmor_parser" type=AVC msg=audit(1421338123.263:142): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16192 comm="apparmor_parser" type=SYSCALL msg=audit(1421338123.263:142): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=eaebc0 a2=f3db a3=7fffef9ab5a0 items=0 ppid=16187 pid=16192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338123.263:142): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421338141.226:143): pid=16211 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421338141.226:144): pid=16211 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421338141.226:145): pid=16211 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=4 res=1 type=USER_START msg=audit(1421338141.226:146): pid=16211 uid=0 auid=0 ses=4 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421338142.506:147): pid=16211 uid=0 auid=0 ses=4 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421338142.506:148): pid=16211 uid=0 auid=0 ses=4 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421338155.990:149): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16236 comm="apparmor_parser" type=AVC msg=audit(1421338155.990:149): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16236 comm="apparmor_parser" type=AVC msg=audit(1421338155.990:149): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16236 comm="apparmor_parser" type=SYSCALL msg=audit(1421338155.990:149): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1108bc0 a2=f3db a3=7fff2dd2b650 items=0 ppid=16232 pid=16236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338155.990:149): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338188.260:150): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16263 comm="apparmor_parser" type=AVC msg=audit(1421338188.260:150): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16263 comm="apparmor_parser" type=AVC msg=audit(1421338188.260:150): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16263 comm="apparmor_parser" type=SYSCALL msg=audit(1421338188.260:150): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=962bc0 a2=f3db a3=7fff8e554710 items=0 ppid=16258 pid=16263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338188.260:150): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338220.427:151): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16301 comm="apparmor_parser" type=AVC msg=audit(1421338220.427:151): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16301 comm="apparmor_parser" type=AVC msg=audit(1421338220.427:151): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16301 comm="apparmor_parser" type=SYSCALL msg=audit(1421338220.427:151): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=ccabc0 a2=f3db a3=7fff20f0a630 items=0 ppid=16296 pid=16301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338220.427:151): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338252.789:152): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16329 comm="apparmor_parser" type=AVC msg=audit(1421338252.789:152): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16329 comm="apparmor_parser" type=AVC msg=audit(1421338252.789:152): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16329 comm="apparmor_parser" type=SYSCALL msg=audit(1421338252.789:152): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1f78bc0 a2=f3db a3=7fff48206600 items=0 ppid=16324 pid=16329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338252.789:152): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338314.306:153): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16369 comm="apparmor_parser" type=AVC msg=audit(1421338314.306:153): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16369 comm="apparmor_parser" type=AVC msg=audit(1421338314.306:153): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16369 comm="apparmor_parser" type=SYSCALL msg=audit(1421338314.306:153): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=c3abc0 a2=f3db a3=7fffdb8986e0 items=0 ppid=16365 pid=16369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338314.306:153): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338346.613:154): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16404 comm="apparmor_parser" type=AVC msg=audit(1421338346.613:154): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16404 comm="apparmor_parser" type=AVC msg=audit(1421338346.613:154): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16404 comm="apparmor_parser" type=SYSCALL msg=audit(1421338346.613:154): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=180fbc0 a2=f3db a3=7fffeed64070 items=0 ppid=16399 pid=16404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338346.613:154): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338408.853:155): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16441 comm="apparmor_parser" type=AVC msg=audit(1421338408.853:155): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16441 comm="apparmor_parser" type=AVC msg=audit(1421338408.853:155): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16441 comm="apparmor_parser" type=SYSCALL msg=audit(1421338408.853:155): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1ff9bc0 a2=f3db a3=7fff966ddd20 items=0 ppid=16437 pid=16441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338408.853:155): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338472.367:156): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16473 comm="apparmor_parser" type=AVC msg=audit(1421338472.367:156): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16473 comm="apparmor_parser" type=AVC msg=audit(1421338472.367:156): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16473 comm="apparmor_parser" type=SYSCALL msg=audit(1421338472.367:156): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=c31bc0 a2=f3db a3=7fff84a5b210 items=0 ppid=16469 pid=16473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338472.367:156): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421338501.757:157): pid=16491 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421338501.757:158): pid=16491 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421338501.757:159): pid=16491 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=5 res=1 type=USER_START msg=audit(1421338501.757:160): pid=16491 uid=0 auid=0 ses=5 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421338501.757:161): pid=16491 uid=0 auid=0 ses=5 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421338501.757:162): pid=16491 uid=0 auid=0 ses=5 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421338507.190:163): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16507 comm="apparmor_parser" type=AVC msg=audit(1421338507.190:163): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16507 comm="apparmor_parser" type=AVC msg=audit(1421338507.190:163): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16507 comm="apparmor_parser" type=SYSCALL msg=audit(1421338507.190:163): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=14e1bc0 a2=f3db a3=7fffc0fcdf60 items=0 ppid=16502 pid=16507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338507.190:163): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338539.233:164): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16537 comm="apparmor_parser" type=AVC msg=audit(1421338539.233:164): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16537 comm="apparmor_parser" type=AVC msg=audit(1421338539.233:164): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16537 comm="apparmor_parser" type=SYSCALL msg=audit(1421338539.233:164): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1230bc0 a2=f3db a3=7ffffc742420 items=0 ppid=16532 pid=16537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338539.233:164): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338605.388:165): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16573 comm="apparmor_parser" type=AVC msg=audit(1421338605.388:165): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16573 comm="apparmor_parser" type=AVC msg=audit(1421338605.388:165): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16573 comm="apparmor_parser" type=SYSCALL msg=audit(1421338605.388:165): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=184ebc0 a2=f3db a3=7fffdb4b3090 items=0 ppid=16569 pid=16573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338605.388:165): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421338621.759:166): pid=16591 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421338621.759:167): pid=16591 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421338621.759:168): pid=16591 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=6 res=1 type=USER_START msg=audit(1421338621.759:169): pid=16591 uid=0 auid=0 ses=6 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421338622.656:170): pid=16591 uid=0 auid=0 ses=6 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421338622.656:171): pid=16591 uid=0 auid=0 ses=6 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421338638.491:172): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16615 comm="apparmor_parser" type=AVC msg=audit(1421338638.491:172): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16615 comm="apparmor_parser" type=AVC msg=audit(1421338638.491:172): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16615 comm="apparmor_parser" type=SYSCALL msg=audit(1421338638.491:172): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=217fbc0 a2=f3db a3=7fffdc227b90 items=0 ppid=16610 pid=16615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338638.491:172): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338703.041:173): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16647 comm="apparmor_parser" type=AVC msg=audit(1421338703.041:173): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16647 comm="apparmor_parser" type=AVC msg=audit(1421338703.041:173): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16647 comm="apparmor_parser" type=SYSCALL msg=audit(1421338703.041:173): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=126fbc0 a2=f3db a3=7fff2a80fac0 items=0 ppid=16642 pid=16647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338703.041:173): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338735.916:174): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16680 comm="apparmor_parser" type=AVC msg=audit(1421338735.916:174): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16680 comm="apparmor_parser" type=AVC msg=audit(1421338735.916:174): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16680 comm="apparmor_parser" type=SYSCALL msg=audit(1421338735.916:174): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=25a8bc0 a2=f3db a3=7fff3e7d3b00 items=0 ppid=16676 pid=16680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338735.916:174): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338767.995:175): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16711 comm="apparmor_parser" type=AVC msg=audit(1421338767.995:175): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16711 comm="apparmor_parser" type=AVC msg=audit(1421338767.995:175): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16711 comm="apparmor_parser" type=SYSCALL msg=audit(1421338767.995:175): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1e2dbc0 a2=f3db a3=7fffbaac7730 items=0 ppid=16706 pid=16711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338767.995:175): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338800.174:176): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16755 comm="apparmor_parser" type=AVC msg=audit(1421338800.174:176): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16755 comm="apparmor_parser" type=AVC msg=audit(1421338800.174:176): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16755 comm="apparmor_parser" type=SYSCALL msg=audit(1421338800.174:176): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=15e6bc0 a2=f3db a3=7fff4425e370 items=0 ppid=16750 pid=16755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338800.174:176): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338832.249:177): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16793 comm="apparmor_parser" type=AVC msg=audit(1421338832.249:177): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16793 comm="apparmor_parser" type=AVC msg=audit(1421338832.249:177): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16793 comm="apparmor_parser" type=SYSCALL msg=audit(1421338832.249:177): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=a9fbc0 a2=f3db a3=7fff1ea6c240 items=0 ppid=16788 pid=16793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338832.249:177): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338868.437:178): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16825 comm="apparmor_parser" type=AVC msg=audit(1421338868.437:178): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16825 comm="apparmor_parser" type=AVC msg=audit(1421338868.437:178): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16825 comm="apparmor_parser" type=SYSCALL msg=audit(1421338868.437:178): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=16bebc0 a2=f3db a3=7fff629f2690 items=0 ppid=16820 pid=16825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338868.437:178): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338902.145:179): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16853 comm="apparmor_parser" type=AVC msg=audit(1421338902.145:179): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16853 comm="apparmor_parser" type=AVC msg=audit(1421338902.145:179): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16853 comm="apparmor_parser" type=SYSCALL msg=audit(1421338902.145:179): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1100bc0 a2=f3db a3=7fff1be5ecb0 items=0 ppid=16848 pid=16853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338902.145:179): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421338937.709:180): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16888 comm="apparmor_parser" type=AVC msg=audit(1421338937.709:180): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16888 comm="apparmor_parser" type=AVC msg=audit(1421338937.709:180): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16888 comm="apparmor_parser" type=SYSCALL msg=audit(1421338937.709:180): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1547bc0 a2=f3db a3=7fffc73bcac0 items=0 ppid=16883 pid=16888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421338937.709:180): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339002.831:181): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16924 comm="apparmor_parser" type=AVC msg=audit(1421339002.831:181): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16924 comm="apparmor_parser" type=AVC msg=audit(1421339002.831:181): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16924 comm="apparmor_parser" type=SYSCALL msg=audit(1421339002.831:181): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=25e8bc0 a2=f3db a3=7fff53975630 items=0 ppid=16919 pid=16924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339002.831:181): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339066.845:182): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=16957 comm="apparmor_parser" type=AVC msg=audit(1421339066.845:182): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=16957 comm="apparmor_parser" type=AVC msg=audit(1421339066.845:182): apparmor="STATUS" operation="profile_replace" name="third_party" pid=16957 comm="apparmor_parser" type=SYSCALL msg=audit(1421339066.845:182): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=251dbc0 a2=f3db a3=7fffba80f810 items=0 ppid=16952 pid=16957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339066.845:182): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421339101.656:183): pid=16984 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421339101.656:184): pid=16984 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421339101.656:185): pid=16984 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=7 res=1 type=USER_START msg=audit(1421339101.660:186): pid=16984 uid=0 auid=0 ses=7 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421339101.660:187): pid=16984 uid=0 auid=0 ses=7 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421339101.660:188): pid=16984 uid=0 auid=0 ses=7 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421339129.867:189): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=17000 comm="apparmor_parser" type=AVC msg=audit(1421339129.867:189): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=17000 comm="apparmor_parser" type=AVC msg=audit(1421339129.867:189): apparmor="STATUS" operation="profile_replace" name="third_party" pid=17000 comm="apparmor_parser" type=SYSCALL msg=audit(1421339129.867:189): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1391bc0 a2=f3db a3=7fff00ba5380 items=0 ppid=16995 pid=17000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339129.867:189): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339163.398:190): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=17029 comm="apparmor_parser" type=AVC msg=audit(1421339163.398:190): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=17029 comm="apparmor_parser" type=AVC msg=audit(1421339163.398:190): apparmor="STATUS" operation="profile_replace" name="third_party" pid=17029 comm="apparmor_parser" type=SYSCALL msg=audit(1421339163.398:190): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=232abc0 a2=f3db a3=7fffb5683ef0 items=0 ppid=17024 pid=17029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339163.398:190): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339196.033:191): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=17065 comm="apparmor_parser" type=AVC msg=audit(1421339196.033:191): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=17065 comm="apparmor_parser" type=AVC msg=audit(1421339196.033:191): apparmor="STATUS" operation="profile_replace" name="third_party" pid=17065 comm="apparmor_parser" type=SYSCALL msg=audit(1421339196.033:191): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=139cbc0 a2=f3db a3=7ffffb20ebb0 items=0 ppid=17060 pid=17065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339196.033:191): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339229.832:192): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=17098 comm="apparmor_parser" type=AVC msg=audit(1421339229.832:192): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=17098 comm="apparmor_parser" type=AVC msg=audit(1421339229.832:192): apparmor="STATUS" operation="profile_replace" name="third_party" pid=17098 comm="apparmor_parser" type=SYSCALL msg=audit(1421339229.832:192): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2468bc0 a2=f3db a3=7fff7ce2eb50 items=0 ppid=17093 pid=17098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339229.832:192): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339262.075:193): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=17128 comm="apparmor_parser" type=AVC msg=audit(1421339262.075:193): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=17128 comm="apparmor_parser" type=AVC msg=audit(1421339262.075:193): apparmor="STATUS" operation="profile_replace" name="third_party" pid=17128 comm="apparmor_parser" type=SYSCALL msg=audit(1421339262.075:193): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1b42bc0 a2=f3db a3=7fff7fe28a30 items=0 ppid=17124 pid=17128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339262.075:193): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339295.183:194): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=17175 comm="apparmor_parser" type=AVC msg=audit(1421339295.183:194): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=17175 comm="apparmor_parser" type=AVC msg=audit(1421339295.183:194): apparmor="STATUS" operation="profile_replace" name="third_party" pid=17175 comm="apparmor_parser" type=SYSCALL msg=audit(1421339295.183:194): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=9e9bc0 a2=f3db a3=7fff27dcf360 items=0 ppid=17171 pid=17175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339295.183:194): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339327.170:195): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=17205 comm="apparmor_parser" type=AVC msg=audit(1421339327.170:195): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=17205 comm="apparmor_parser" type=AVC msg=audit(1421339327.170:195): apparmor="STATUS" operation="profile_replace" name="third_party" pid=17205 comm="apparmor_parser" type=SYSCALL msg=audit(1421339327.170:195): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1690bc0 a2=f3db a3=7fffa0729bd0 items=0 ppid=17200 pid=17205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339327.170:195): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_AUTH msg=audit(1421339393.312:196): pid=17618 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=failed' type=AVC msg=audit(1421339395.628:197): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=17636 comm="apparmor_parser" type=AVC msg=audit(1421339395.628:197): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=17636 comm="apparmor_parser" type=AVC msg=audit(1421339395.628:197): apparmor="STATUS" operation="profile_replace" name="third_party" pid=17636 comm="apparmor_parser" type=SYSCALL msg=audit(1421339395.628:197): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2638bc0 a2=f3db a3=7fffb390efd0 items=0 ppid=17632 pid=17636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339395.628:197): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_AUTH msg=audit(1421339429.047:198): pid=17665 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=failed' type=USER_AUTH msg=audit(1421339432.155:199): pid=17665 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_ACCT msg=audit(1421339432.155:200): pid=17665 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_START msg=audit(1421339432.155:201): pid=17665 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_END msg=audit(1421339433.103:202): pid=17665 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421339460.795:203): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=17871 comm="apparmor_parser" type=AVC msg=audit(1421339460.795:203): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=17871 comm="apparmor_parser" type=AVC msg=audit(1421339460.795:203): apparmor="STATUS" operation="profile_replace" name="third_party" pid=17871 comm="apparmor_parser" type=SYSCALL msg=audit(1421339460.795:203): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1ee6bc0 a2=f3db a3=7fff1d1390b0 items=0 ppid=17867 pid=17871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339460.795:203): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339526.029:204): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18042 comm="apparmor_parser" type=AVC msg=audit(1421339526.029:204): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18042 comm="apparmor_parser" type=AVC msg=audit(1421339526.029:204): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18042 comm="apparmor_parser" type=SYSCALL msg=audit(1421339526.029:204): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=938bc0 a2=f3db a3=7fffc478b1a0 items=0 ppid=18038 pid=18042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339526.029:204): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339559.033:205): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18116 comm="apparmor_parser" type=AVC msg=audit(1421339559.033:205): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18116 comm="apparmor_parser" type=AVC msg=audit(1421339559.033:205): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18116 comm="apparmor_parser" type=SYSCALL msg=audit(1421339559.033:205): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=24a0bc0 a2=f3db a3=7fff2a4594f0 items=0 ppid=18111 pid=18116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339559.033:205): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339591.790:206): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18160 comm="apparmor_parser" type=AVC msg=audit(1421339591.790:206): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18160 comm="apparmor_parser" type=AVC msg=audit(1421339591.790:206): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18160 comm="apparmor_parser" type=SYSCALL msg=audit(1421339591.790:206): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=104abc0 a2=f3db a3=7fffb5f01000 items=0 ppid=18155 pid=18160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339591.790:206): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339655.405:207): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18223 comm="apparmor_parser" type=AVC msg=audit(1421339655.405:207): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18223 comm="apparmor_parser" type=AVC msg=audit(1421339655.405:207): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18223 comm="apparmor_parser" type=SYSCALL msg=audit(1421339655.405:207): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=86ebc0 a2=f3db a3=7fff52bcc1a0 items=0 ppid=18218 pid=18223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339655.405:207): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339688.590:208): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18257 comm="apparmor_parser" type=AVC msg=audit(1421339688.590:208): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18257 comm="apparmor_parser" type=AVC msg=audit(1421339688.590:208): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18257 comm="apparmor_parser" type=SYSCALL msg=audit(1421339688.590:208): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=95ebc0 a2=f3db a3=7fffc4c9fc30 items=0 ppid=18252 pid=18257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339688.590:208): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421339701.328:209): pid=18340 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421339701.328:210): pid=18340 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421339701.328:211): pid=18340 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=8 res=1 type=USER_START msg=audit(1421339701.328:212): pid=18340 uid=0 auid=0 ses=8 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421339701.332:213): pid=18340 uid=0 auid=0 ses=8 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421339701.332:214): pid=18340 uid=0 auid=0 ses=8 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=ANOM_PROMISCUOUS msg=audit(1421339705.047:215): dev=eth1 prom=256 old_prom=0 auid=4294967295 uid=1000 gid=1000 ses=4294967295 type=SYSCALL msg=audit(1421339705.047:215): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c0485687 a2=7f5a30681af0 a3=fffffffd items=0 ppid=17725 pid=18356 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="EMT-0" exe="/usr/lib/virtualbox/VirtualBox" key=(null) type=PROCTITLE msg=audit(1421339705.047:215): proctitle=2F7573722F6C69622F7669727475616C626F782F5669727475616C426F78002D2D636F6D6D656E74005562756E74752D31322E30342E352D69333836002D2D7374617274766D0034373232326631382D633264392D343835652D616666382D633266613435383461346661002D2D6E6F2D7374617274766D2D6572726F726D73 type=AVC msg=audit(1421339752.255:216): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18425 comm="apparmor_parser" type=AVC msg=audit(1421339752.255:216): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18425 comm="apparmor_parser" type=AVC msg=audit(1421339752.255:216): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18425 comm="apparmor_parser" type=SYSCALL msg=audit(1421339752.255:216): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1d4dbc0 a2=f3db a3=7fff36e6a430 items=0 ppid=18420 pid=18425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339752.255:216): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339785.141:217): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18468 comm="apparmor_parser" type=AVC msg=audit(1421339785.141:217): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18468 comm="apparmor_parser" type=AVC msg=audit(1421339785.141:217): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18468 comm="apparmor_parser" type=SYSCALL msg=audit(1421339785.141:217): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1dacbc0 a2=f3db a3=7fff15c306e0 items=0 ppid=18463 pid=18468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339785.141:217): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339817.252:218): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18495 comm="apparmor_parser" type=AVC msg=audit(1421339817.252:218): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18495 comm="apparmor_parser" type=AVC msg=audit(1421339817.252:218): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18495 comm="apparmor_parser" type=SYSCALL msg=audit(1421339817.252:218): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1079bc0 a2=f3db a3=7fffc9bed740 items=0 ppid=18490 pid=18495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339817.252:218): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339849.439:219): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18527 comm="apparmor_parser" type=AVC msg=audit(1421339849.439:219): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18527 comm="apparmor_parser" type=AVC msg=audit(1421339849.439:219): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18527 comm="apparmor_parser" type=SYSCALL msg=audit(1421339849.439:219): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=25f6bc0 a2=f3db a3=7fffc8db9820 items=0 ppid=18523 pid=18527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339849.439:219): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339881.362:220): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18554 comm="apparmor_parser" type=AVC msg=audit(1421339881.362:220): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18554 comm="apparmor_parser" type=AVC msg=audit(1421339881.362:220): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18554 comm="apparmor_parser" type=SYSCALL msg=audit(1421339881.362:220): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=9febc0 a2=f3db a3=7fff8c5d9a00 items=0 ppid=18550 pid=18554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339881.362:220): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421339913.565:221): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18585 comm="apparmor_parser" type=AVC msg=audit(1421339913.565:221): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18585 comm="apparmor_parser" type=AVC msg=audit(1421339913.565:221): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18585 comm="apparmor_parser" type=SYSCALL msg=audit(1421339913.565:221): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=158abc0 a2=f3db a3=7fff2ebb21d0 items=0 ppid=18580 pid=18585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339913.565:221): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421339941.333:222): pid=18604 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421339941.333:223): pid=18604 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421339941.333:224): pid=18604 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=9 res=1 type=USER_START msg=audit(1421339941.333:225): pid=18604 uid=0 auid=0 ses=9 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421339941.536:226): pid=18604 uid=0 auid=0 ses=9 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421339941.536:227): pid=18604 uid=0 auid=0 ses=9 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421339978.055:228): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18631 comm="apparmor_parser" type=AVC msg=audit(1421339978.055:228): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18631 comm="apparmor_parser" type=AVC msg=audit(1421339978.055:228): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18631 comm="apparmor_parser" type=SYSCALL msg=audit(1421339978.055:228): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1198bc0 a2=f3db a3=7fffc58af440 items=0 ppid=18626 pid=18631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421339978.055:228): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340011.314:229): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18665 comm="apparmor_parser" type=AVC msg=audit(1421340011.314:229): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18665 comm="apparmor_parser" type=AVC msg=audit(1421340011.314:229): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18665 comm="apparmor_parser" type=SYSCALL msg=audit(1421340011.314:229): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1cb5bc0 a2=f3db a3=7fff5eac2520 items=0 ppid=18660 pid=18665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340011.314:229): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340043.238:230): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18692 comm="apparmor_parser" type=AVC msg=audit(1421340043.238:230): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18692 comm="apparmor_parser" type=AVC msg=audit(1421340043.238:230): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18692 comm="apparmor_parser" type=SYSCALL msg=audit(1421340043.238:230): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=25dfbc0 a2=f3db a3=7fff0a324d80 items=0 ppid=18687 pid=18692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340043.238:230): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340076.290:231): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18723 comm="apparmor_parser" type=AVC msg=audit(1421340076.290:231): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18723 comm="apparmor_parser" type=AVC msg=audit(1421340076.290:231): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18723 comm="apparmor_parser" type=SYSCALL msg=audit(1421340076.290:231): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=d53bc0 a2=f3db a3=7fff4932cc40 items=0 ppid=18718 pid=18723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340076.290:231): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340109.113:232): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18753 comm="apparmor_parser" type=AVC msg=audit(1421340109.113:232): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18753 comm="apparmor_parser" type=AVC msg=audit(1421340109.113:232): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18753 comm="apparmor_parser" type=SYSCALL msg=audit(1421340109.113:232): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=11c2bc0 a2=f3db a3=7fff27c75c80 items=0 ppid=18749 pid=18753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340109.113:232): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340174.969:233): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18828 comm="apparmor_parser" type=AVC msg=audit(1421340174.969:233): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18828 comm="apparmor_parser" type=AVC msg=audit(1421340174.969:233): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18828 comm="apparmor_parser" type=SYSCALL msg=audit(1421340174.969:233): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=b13bc0 a2=f3db a3=7fffa39aa8c0 items=0 ppid=18823 pid=18828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340174.969:233): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340208.069:234): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=18858 comm="apparmor_parser" type=AVC msg=audit(1421340208.069:234): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=18858 comm="apparmor_parser" type=AVC msg=audit(1421340208.069:234): apparmor="STATUS" operation="profile_replace" name="third_party" pid=18858 comm="apparmor_parser" type=SYSCALL msg=audit(1421340208.069:234): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=265bbc0 a2=f3db a3=7fff0eace180 items=0 ppid=18854 pid=18858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340208.069:234): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340240.523:235): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19004 comm="apparmor_parser" type=AVC msg=audit(1421340240.523:235): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19004 comm="apparmor_parser" type=AVC msg=audit(1421340240.523:235): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19004 comm="apparmor_parser" type=SYSCALL msg=audit(1421340240.523:235): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=7fdbc0 a2=f3db a3=7fff67b346d0 items=0 ppid=18999 pid=19004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340240.523:235): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421340301.801:236): pid=19038 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421340301.801:237): pid=19038 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421340301.801:238): pid=19038 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=10 res=1 type=USER_START msg=audit(1421340301.801:239): pid=19038 uid=0 auid=0 ses=10 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421340301.805:240): pid=19038 uid=0 auid=0 ses=10 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421340301.805:241): pid=19038 uid=0 auid=0 ses=10 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421340307.978:242): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19055 comm="apparmor_parser" type=AVC msg=audit(1421340307.978:242): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19055 comm="apparmor_parser" type=AVC msg=audit(1421340307.978:242): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19055 comm="apparmor_parser" type=SYSCALL msg=audit(1421340307.978:242): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2583bc0 a2=f3db a3=7fff4b1c4120 items=0 ppid=19051 pid=19055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340307.978:242): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340342.462:243): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19132 comm="apparmor_parser" type=AVC msg=audit(1421340342.462:243): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19132 comm="apparmor_parser" type=AVC msg=audit(1421340342.462:243): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19132 comm="apparmor_parser" type=SYSCALL msg=audit(1421340342.462:243): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=9ccbc0 a2=f3db a3=7ffff88e3eb0 items=0 ppid=19127 pid=19132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340342.462:243): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340405.859:244): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19163 comm="apparmor_parser" type=AVC msg=audit(1421340405.859:244): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19163 comm="apparmor_parser" type=AVC msg=audit(1421340405.859:244): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19163 comm="apparmor_parser" type=SYSCALL msg=audit(1421340405.859:244): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1442bc0 a2=f3db a3=7fff9b58cb10 items=0 ppid=19158 pid=19163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340405.859:244): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340438.341:245): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19193 comm="apparmor_parser" type=AVC msg=audit(1421340438.341:245): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19193 comm="apparmor_parser" type=AVC msg=audit(1421340438.341:245): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19193 comm="apparmor_parser" type=SYSCALL msg=audit(1421340438.341:245): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1e9abc0 a2=f3db a3=7fff9cd2ab50 items=0 ppid=19188 pid=19193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340438.341:245): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340470.610:246): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19219 comm="apparmor_parser" type=AVC msg=audit(1421340470.610:246): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19219 comm="apparmor_parser" type=AVC msg=audit(1421340470.610:246): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19219 comm="apparmor_parser" type=SYSCALL msg=audit(1421340470.610:246): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1020bc0 a2=f3db a3=7fff8c1feca0 items=0 ppid=19214 pid=19219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340470.610:246): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340531.804:247): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19258 comm="apparmor_parser" type=AVC msg=audit(1421340531.804:247): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19258 comm="apparmor_parser" type=AVC msg=audit(1421340531.804:247): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19258 comm="apparmor_parser" type=SYSCALL msg=audit(1421340531.804:247): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2188bc0 a2=f3db a3=7ffffe72ef00 items=0 ppid=19253 pid=19258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340531.804:247): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340593.276:248): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19288 comm="apparmor_parser" type=AVC msg=audit(1421340593.276:248): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19288 comm="apparmor_parser" type=AVC msg=audit(1421340593.276:248): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19288 comm="apparmor_parser" type=SYSCALL msg=audit(1421340593.276:248): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=ec5bc0 a2=f3db a3=7fff86c1d490 items=0 ppid=19283 pid=19288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340593.276:248): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340626.112:249): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19327 comm="apparmor_parser" type=AVC msg=audit(1421340626.112:249): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19327 comm="apparmor_parser" type=AVC msg=audit(1421340626.112:249): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19327 comm="apparmor_parser" type=SYSCALL msg=audit(1421340626.112:249): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2025bc0 a2=f3db a3=7fffedc71770 items=0 ppid=19323 pid=19327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340626.112:249): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340658.479:250): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19369 comm="apparmor_parser" type=AVC msg=audit(1421340658.479:250): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19369 comm="apparmor_parser" type=AVC msg=audit(1421340658.479:250): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19369 comm="apparmor_parser" type=SYSCALL msg=audit(1421340658.479:250): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=12e8bc0 a2=f3db a3=7fffbdc00370 items=0 ppid=19365 pid=19369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340658.479:250): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340720.398:251): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19403 comm="apparmor_parser" type=AVC msg=audit(1421340720.398:251): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19403 comm="apparmor_parser" type=AVC msg=audit(1421340720.398:251): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19403 comm="apparmor_parser" type=SYSCALL msg=audit(1421340720.398:251): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1dfbbc0 a2=f3db a3=7fff49c27670 items=0 ppid=19399 pid=19403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340720.398:251): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340781.916:252): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19445 comm="apparmor_parser" type=AVC msg=audit(1421340781.916:252): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19445 comm="apparmor_parser" type=AVC msg=audit(1421340781.916:252): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19445 comm="apparmor_parser" type=SYSCALL msg=audit(1421340781.916:252): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=cd7bc0 a2=f3db a3=7fffd75f6890 items=0 ppid=19441 pid=19445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340781.916:252): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340814.238:253): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19479 comm="apparmor_parser" type=AVC msg=audit(1421340814.238:253): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19479 comm="apparmor_parser" type=AVC msg=audit(1421340814.238:253): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19479 comm="apparmor_parser" type=SYSCALL msg=audit(1421340814.238:253): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=23cfbc0 a2=f3db a3=7fff51e4e840 items=0 ppid=19475 pid=19479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340814.238:253): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340846.853:254): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19510 comm="apparmor_parser" type=AVC msg=audit(1421340846.853:254): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19510 comm="apparmor_parser" type=AVC msg=audit(1421340846.853:254): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19510 comm="apparmor_parser" type=SYSCALL msg=audit(1421340846.853:254): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=7d8bc0 a2=f3db a3=7fff246c0690 items=0 ppid=19505 pid=19510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340846.853:254): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421340879.211:255): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19545 comm="apparmor_parser" type=AVC msg=audit(1421340879.211:255): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19545 comm="apparmor_parser" type=AVC msg=audit(1421340879.211:255): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19545 comm="apparmor_parser" type=SYSCALL msg=audit(1421340879.211:255): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=138bbc0 a2=f3db a3=7fff3876b4f0 items=0 ppid=19541 pid=19545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340879.211:255): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421340901.906:256): pid=19567 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421340901.906:257): pid=19567 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421340901.906:258): pid=19567 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=11 res=1 type=USER_START msg=audit(1421340901.906:259): pid=19567 uid=0 auid=0 ses=11 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421340901.922:260): pid=19567 uid=0 auid=0 ses=11 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421340901.922:261): pid=19567 uid=0 auid=0 ses=11 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421340940.864:262): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19583 comm="apparmor_parser" type=AVC msg=audit(1421340940.864:262): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19583 comm="apparmor_parser" type=AVC msg=audit(1421340940.864:262): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19583 comm="apparmor_parser" type=SYSCALL msg=audit(1421340940.864:262): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=26adbc0 a2=f3db a3=7ffff4a23ce0 items=0 ppid=19579 pid=19583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421340940.864:262): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341002.301:263): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19615 comm="apparmor_parser" type=AVC msg=audit(1421341002.301:263): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19615 comm="apparmor_parser" type=AVC msg=audit(1421341002.301:263): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19615 comm="apparmor_parser" type=SYSCALL msg=audit(1421341002.301:263): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2507bc0 a2=f3db a3=7fff049e9340 items=0 ppid=19610 pid=19615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341002.301:263): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341035.266:264): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19654 comm="apparmor_parser" type=AVC msg=audit(1421341035.266:264): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19654 comm="apparmor_parser" type=AVC msg=audit(1421341035.266:264): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19654 comm="apparmor_parser" type=SYSCALL msg=audit(1421341035.266:264): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1eecbc0 a2=f3db a3=7fff36c35d40 items=0 ppid=19650 pid=19654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341035.266:264): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341096.815:265): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19691 comm="apparmor_parser" type=AVC msg=audit(1421341096.815:265): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19691 comm="apparmor_parser" type=AVC msg=audit(1421341096.815:265): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19691 comm="apparmor_parser" type=SYSCALL msg=audit(1421341096.815:265): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1016bc0 a2=f3db a3=7fffc24f9a70 items=0 ppid=19687 pid=19691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341096.815:265): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341158.927:266): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19721 comm="apparmor_parser" type=AVC msg=audit(1421341158.927:266): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19721 comm="apparmor_parser" type=AVC msg=audit(1421341158.927:266): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19721 comm="apparmor_parser" type=SYSCALL msg=audit(1421341158.927:266): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1916bc0 a2=f3db a3=7fffb1372cd0 items=0 ppid=19716 pid=19721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341158.927:266): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341191.151:267): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=19759 comm="apparmor_parser" type=AVC msg=audit(1421341191.151:267): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=19759 comm="apparmor_parser" type=AVC msg=audit(1421341191.151:267): apparmor="STATUS" operation="profile_replace" name="third_party" pid=19759 comm="apparmor_parser" type=SYSCALL msg=audit(1421341191.151:267): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1b93bc0 a2=f3db a3=7fff3c1127b0 items=0 ppid=19755 pid=19759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341191.151:267): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421341202.659:268): pid=19777 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421341202.659:269): pid=19777 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421341202.659:270): pid=19777 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=12 res=1 type=USER_START msg=audit(1421341202.683:271): pid=19777 uid=0 auid=0 ses=12 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421341207.675:272): pid=19777 uid=0 auid=0 ses=12 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421341207.675:273): pid=19777 uid=0 auid=0 ses=12 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421341223.591:274): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20461 comm="apparmor_parser" type=AVC msg=audit(1421341223.591:274): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20461 comm="apparmor_parser" type=AVC msg=audit(1421341223.591:274): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20461 comm="apparmor_parser" type=SYSCALL msg=audit(1421341223.591:274): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=223fbc0 a2=f3db a3=7fff9d963fa0 items=0 ppid=20457 pid=20461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341223.591:274): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341284.895:275): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20497 comm="apparmor_parser" type=AVC msg=audit(1421341284.895:275): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20497 comm="apparmor_parser" type=AVC msg=audit(1421341284.895:275): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20497 comm="apparmor_parser" type=SYSCALL msg=audit(1421341284.895:275): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=b90bc0 a2=f3db a3=7fffbc379b30 items=0 ppid=20493 pid=20497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341284.895:275): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341316.746:276): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20530 comm="apparmor_parser" type=AVC msg=audit(1421341316.746:276): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20530 comm="apparmor_parser" type=AVC msg=audit(1421341316.746:276): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20530 comm="apparmor_parser" type=SYSCALL msg=audit(1421341316.746:276): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=26a1bc0 a2=f3db a3=7fff0bfbfe50 items=0 ppid=20525 pid=20530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341316.746:276): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341379.733:277): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20563 comm="apparmor_parser" type=AVC msg=audit(1421341379.733:277): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20563 comm="apparmor_parser" type=AVC msg=audit(1421341379.733:277): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20563 comm="apparmor_parser" type=SYSCALL msg=audit(1421341379.733:277): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1b23bc0 a2=f3db a3=7fff398773a0 items=0 ppid=20558 pid=20563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341379.733:277): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341442.008:278): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20595 comm="apparmor_parser" type=AVC msg=audit(1421341442.008:278): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20595 comm="apparmor_parser" type=AVC msg=audit(1421341442.008:278): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20595 comm="apparmor_parser" type=SYSCALL msg=audit(1421341442.008:278): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=b0dbc0 a2=f3db a3=7fff9b14af20 items=0 ppid=20591 pid=20595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341442.008:278): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341474.863:279): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20625 comm="apparmor_parser" type=AVC msg=audit(1421341474.863:279): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20625 comm="apparmor_parser" type=AVC msg=audit(1421341474.863:279): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20625 comm="apparmor_parser" type=SYSCALL msg=audit(1421341474.863:279): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=ac8bc0 a2=f3db a3=7fff94177120 items=0 ppid=20621 pid=20625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341474.863:279): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421341501.678:280): pid=20645 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421341501.678:281): pid=20645 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421341501.678:282): pid=20645 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=13 res=1 type=USER_START msg=audit(1421341501.678:283): pid=20645 uid=0 auid=0 ses=13 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421341501.838:284): pid=20645 uid=0 auid=0 ses=13 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421341501.838:285): pid=20645 uid=0 auid=0 ses=13 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421341507.546:286): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20660 comm="apparmor_parser" type=AVC msg=audit(1421341507.546:286): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20660 comm="apparmor_parser" type=AVC msg=audit(1421341507.546:286): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20660 comm="apparmor_parser" type=SYSCALL msg=audit(1421341507.546:286): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=271dbc0 a2=f3db a3=7fff2d8a18d0 items=0 ppid=20655 pid=20660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341507.546:286): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341571.988:287): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20689 comm="apparmor_parser" type=AVC msg=audit(1421341571.988:287): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20689 comm="apparmor_parser" type=AVC msg=audit(1421341571.988:287): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20689 comm="apparmor_parser" type=SYSCALL msg=audit(1421341571.988:287): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1d97bc0 a2=f3db a3=7fff3ab9ab10 items=0 ppid=20685 pid=20689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341571.988:287): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341605.067:288): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20719 comm="apparmor_parser" type=AVC msg=audit(1421341605.067:288): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20719 comm="apparmor_parser" type=AVC msg=audit(1421341605.067:288): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20719 comm="apparmor_parser" type=SYSCALL msg=audit(1421341605.067:288): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1be2bc0 a2=f3db a3=7fffb64dc260 items=0 ppid=20715 pid=20719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341605.067:288): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341637.858:289): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20748 comm="apparmor_parser" type=AVC msg=audit(1421341637.858:289): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20748 comm="apparmor_parser" type=AVC msg=audit(1421341637.858:289): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20748 comm="apparmor_parser" type=SYSCALL msg=audit(1421341637.858:289): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1a51bc0 a2=f3db a3=7fffa19964f0 items=0 ppid=20744 pid=20748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341637.858:289): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341670.885:290): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20784 comm="apparmor_parser" type=AVC msg=audit(1421341670.885:290): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20784 comm="apparmor_parser" type=AVC msg=audit(1421341670.885:290): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20784 comm="apparmor_parser" type=SYSCALL msg=audit(1421341670.885:290): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=13a0bc0 a2=f3db a3=7fffcb143fd0 items=0 ppid=20780 pid=20784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341670.885:290): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341734.986:291): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20829 comm="apparmor_parser" type=AVC msg=audit(1421341734.986:291): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20829 comm="apparmor_parser" type=AVC msg=audit(1421341734.986:291): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20829 comm="apparmor_parser" type=SYSCALL msg=audit(1421341734.986:291): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1d78bc0 a2=f3db a3=7fff9781fa60 items=0 ppid=20824 pid=20829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341734.986:291): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421341741.842:292): pid=20846 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421341741.842:293): pid=20846 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421341741.842:294): pid=20846 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=14 res=1 type=USER_START msg=audit(1421341741.842:295): pid=20846 uid=0 auid=0 ses=14 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421341743.230:296): pid=20846 uid=0 auid=0 ses=14 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421341743.230:297): pid=20846 uid=0 auid=0 ses=14 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421341767.461:298): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=20879 comm="apparmor_parser" type=AVC msg=audit(1421341767.461:298): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=20879 comm="apparmor_parser" type=AVC msg=audit(1421341767.461:298): apparmor="STATUS" operation="profile_replace" name="third_party" pid=20879 comm="apparmor_parser" type=SYSCALL msg=audit(1421341767.461:298): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=83cbc0 a2=f3db a3=7fff096bfe30 items=0 ppid=20875 pid=20879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341767.461:298): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341832.814:299): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=21194 comm="apparmor_parser" type=AVC msg=audit(1421341832.814:299): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=21194 comm="apparmor_parser" type=AVC msg=audit(1421341832.814:299): apparmor="STATUS" operation="profile_replace" name="third_party" pid=21194 comm="apparmor_parser" type=SYSCALL msg=audit(1421341832.814:299): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1623bc0 a2=f3db a3=7fff4f5fe350 items=0 ppid=21190 pid=21194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341832.814:299): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421341894.107:300): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=21375 comm="apparmor_parser" type=AVC msg=audit(1421341894.107:300): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=21375 comm="apparmor_parser" type=AVC msg=audit(1421341894.107:300): apparmor="STATUS" operation="profile_replace" name="third_party" pid=21375 comm="apparmor_parser" type=SYSCALL msg=audit(1421341894.107:300): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=21edbc0 a2=f3db a3=7fffe5746c50 items=0 ppid=21371 pid=21375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341894.107:300): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_AUTH msg=audit(1421341910.358:301): pid=21393 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_ACCT msg=audit(1421341910.358:302): pid=21393 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_START msg=audit(1421341910.358:303): pid=21393 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_END msg=audit(1421341910.554:304): pid=21393 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_START msg=audit(1421341919.058:305): pid=21400 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_END msg=audit(1421341919.110:306): pid=21400 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_START msg=audit(1421341924.622:307): pid=21413 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_END msg=audit(1421341925.302:308): pid=21413 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421341926.498:309): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=21440 comm="apparmor_parser" type=AVC msg=audit(1421341926.498:309): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=21440 comm="apparmor_parser" type=AVC msg=audit(1421341926.498:309): apparmor="STATUS" operation="profile_replace" name="third_party" pid=21440 comm="apparmor_parser" type=SYSCALL msg=audit(1421341926.498:309): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1950bc0 a2=f3db a3=7fff63f50d20 items=0 ppid=21436 pid=21440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341926.498:309): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_START msg=audit(1421341938.749:310): pid=21788 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_END msg=audit(1421341940.513:311): pid=21788 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421341987.755:312): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=23956 comm="apparmor_parser" type=AVC msg=audit(1421341987.755:312): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=23956 comm="apparmor_parser" type=AVC msg=audit(1421341987.755:312): apparmor="STATUS" operation="profile_replace" name="third_party" pid=23956 comm="apparmor_parser" type=SYSCALL msg=audit(1421341987.755:312): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=13aabc0 a2=f3db a3=7fffd37d3190 items=0 ppid=23952 pid=23956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421341987.755:312): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342048.956:313): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=24023 comm="apparmor_parser" type=AVC msg=audit(1421342048.956:313): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=24023 comm="apparmor_parser" type=AVC msg=audit(1421342048.956:313): apparmor="STATUS" operation="profile_replace" name="third_party" pid=24023 comm="apparmor_parser" type=SYSCALL msg=audit(1421342048.956:313): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1a25bc0 a2=f3db a3=7fffec8d43e0 items=0 ppid=24019 pid=24023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342048.956:313): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342081.278:314): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=24052 comm="apparmor_parser" type=AVC msg=audit(1421342081.278:314): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=24052 comm="apparmor_parser" type=AVC msg=audit(1421342081.278:314): apparmor="STATUS" operation="profile_replace" name="third_party" pid=24052 comm="apparmor_parser" type=SYSCALL msg=audit(1421342081.278:314): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=13cfbc0 a2=f3db a3=7fff34ef64b0 items=0 ppid=24048 pid=24052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342081.278:314): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421342101.237:315): pid=24069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421342101.237:316): pid=24069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421342101.237:317): pid=24069 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=15 res=1 type=USER_START msg=audit(1421342101.237:318): pid=24069 uid=0 auid=0 ses=15 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421342101.241:319): pid=24069 uid=0 auid=0 ses=15 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421342101.241:320): pid=24069 uid=0 auid=0 ses=15 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421342113.516:321): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=24084 comm="apparmor_parser" type=AVC msg=audit(1421342113.516:321): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=24084 comm="apparmor_parser" type=AVC msg=audit(1421342113.516:321): apparmor="STATUS" operation="profile_replace" name="third_party" pid=24084 comm="apparmor_parser" type=SYSCALL msg=audit(1421342113.516:321): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=e4fbc0 a2=f3db a3=7fffb68815e0 items=0 ppid=24080 pid=24084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342113.516:321): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342175.889:322): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=24116 comm="apparmor_parser" type=AVC msg=audit(1421342175.889:322): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=24116 comm="apparmor_parser" type=AVC msg=audit(1421342175.889:322): apparmor="STATUS" operation="profile_replace" name="third_party" pid=24116 comm="apparmor_parser" type=SYSCALL msg=audit(1421342175.889:322): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=740bc0 a2=f3db a3=7fffb031c1c0 items=0 ppid=24112 pid=24116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342175.889:322): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342209.853:323): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=24143 comm="apparmor_parser" type=AVC msg=audit(1421342209.853:323): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=24143 comm="apparmor_parser" type=AVC msg=audit(1421342209.853:323): apparmor="STATUS" operation="profile_replace" name="third_party" pid=24143 comm="apparmor_parser" type=SYSCALL msg=audit(1421342209.853:323): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=9a9bc0 a2=f3db a3=7fffa0e14260 items=0 ppid=24139 pid=24143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342209.853:323): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421342221.242:324): pid=24164 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421342221.242:325): pid=24164 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421342221.242:326): pid=24164 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=16 res=1 type=USER_START msg=audit(1421342221.242:327): pid=24164 uid=0 auid=0 ses=16 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421342222.966:328): pid=24164 uid=0 auid=0 ses=16 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421342222.966:329): pid=24164 uid=0 auid=0 ses=16 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_START msg=audit(1421342272.438:330): pid=24182 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421342277.270:331): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=24202 comm="apparmor_parser" type=AVC msg=audit(1421342277.270:331): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=24202 comm="apparmor_parser" type=AVC msg=audit(1421342277.270:331): apparmor="STATUS" operation="profile_replace" name="third_party" pid=24202 comm="apparmor_parser" type=SYSCALL msg=audit(1421342277.270:331): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1dafbc0 a2=f3db a3=7fff1868fcb0 items=0 ppid=24198 pid=24202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342277.270:331): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342312.862:332): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=24272 comm="apparmor_parser" type=AVC msg=audit(1421342312.862:332): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=24272 comm="apparmor_parser" type=AVC msg=audit(1421342312.862:332): apparmor="STATUS" operation="profile_replace" name="third_party" pid=24272 comm="apparmor_parser" type=SYSCALL msg=audit(1421342312.862:332): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=ebebc0 a2=f3db a3=7ffffe914c50 items=0 ppid=24268 pid=24272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342312.862:332): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342346.797:333): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=24301 comm="apparmor_parser" type=AVC msg=audit(1421342346.797:333): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=24301 comm="apparmor_parser" type=AVC msg=audit(1421342346.797:333): apparmor="STATUS" operation="profile_replace" name="third_party" pid=24301 comm="apparmor_parser" type=SYSCALL msg=audit(1421342346.797:333): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=7c6bc0 a2=f3db a3=7fff8e3f00f0 items=0 ppid=24297 pid=24301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342346.797:333): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342380.608:334): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=24353 comm="apparmor_parser" type=AVC msg=audit(1421342380.608:334): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=24353 comm="apparmor_parser" type=AVC msg=audit(1421342380.608:334): apparmor="STATUS" operation="profile_replace" name="third_party" pid=24353 comm="apparmor_parser" type=SYSCALL msg=audit(1421342380.608:334): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1716bc0 a2=f3db a3=7fff16c622b0 items=0 ppid=24349 pid=24353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342380.608:334): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342414.731:335): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=24385 comm="apparmor_parser" type=AVC msg=audit(1421342414.731:335): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=24385 comm="apparmor_parser" type=AVC msg=audit(1421342414.731:335): apparmor="STATUS" operation="profile_replace" name="third_party" pid=24385 comm="apparmor_parser" type=SYSCALL msg=audit(1421342414.731:335): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=ad9bc0 a2=f3db a3=7fffead0b100 items=0 ppid=24381 pid=24385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342414.731:335): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_END msg=audit(1421342453.683:336): pid=24182 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_AUTH msg=audit(1421342473.629:337): pid=25128 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=USER_ACCT msg=audit(1421342473.629:338): pid=25128 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=USER_START msg=audit(1421342473.629:339): pid=25128 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=USER_END msg=audit(1421342475.626:340): pid=25128 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=AVC msg=audit(1421342494.892:341): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=25846 comm="apparmor_parser" type=AVC msg=audit(1421342494.892:341): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=25846 comm="apparmor_parser" type=AVC msg=audit(1421342494.892:341): apparmor="STATUS" operation="profile_replace" name="third_party" pid=25846 comm="apparmor_parser" type=SYSCALL msg=audit(1421342494.892:341): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1d44bc0 a2=f3db a3=7fffdc94e550 items=0 ppid=25842 pid=25846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342494.892:341): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_START msg=audit(1421342499.428:342): pid=25863 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421342564.443:343): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=26031 comm="apparmor_parser" type=AVC msg=audit(1421342564.443:343): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=26031 comm="apparmor_parser" type=AVC msg=audit(1421342564.443:343): apparmor="STATUS" operation="profile_replace" name="third_party" pid=26031 comm="apparmor_parser" type=SYSCALL msg=audit(1421342564.443:343): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=a65bc0 a2=f3db a3=7fff8c848960 items=0 ppid=26027 pid=26031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342564.443:343): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342605.051:344): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=27007 comm="apparmor_parser" type=AVC msg=audit(1421342605.051:344): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=27007 comm="apparmor_parser" type=AVC msg=audit(1421342605.051:344): apparmor="STATUS" operation="profile_replace" name="third_party" pid=27007 comm="apparmor_parser" type=SYSCALL msg=audit(1421342605.051:344): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2507bc0 a2=f3db a3=7fff4a4b1ec0 items=0 ppid=27002 pid=27007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342605.051:344): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342645.298:345): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=28668 comm="apparmor_parser" type=AVC msg=audit(1421342645.298:345): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=28668 comm="apparmor_parser" type=AVC msg=audit(1421342645.298:345): apparmor="STATUS" operation="profile_replace" name="third_party" pid=28668 comm="apparmor_parser" type=SYSCALL msg=audit(1421342645.298:345): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1765bc0 a2=f3db a3=7fff74aaaa80 items=0 ppid=28664 pid=28668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342645.298:345): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_END msg=audit(1421342648.302:346): pid=25863 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_START msg=audit(1421342662.931:347): pid=28741 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_END msg=audit(1421342668.700:348): pid=28741 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_START msg=audit(1421342674.756:349): pid=28868 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421342681.465:350): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=28938 comm="apparmor_parser" type=AVC msg=audit(1421342681.465:350): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=28938 comm="apparmor_parser" type=AVC msg=audit(1421342681.465:350): apparmor="STATUS" operation="profile_replace" name="third_party" pid=28938 comm="apparmor_parser" type=SYSCALL msg=audit(1421342681.465:350): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=144bbc0 a2=f3db a3=7fffc3ac11a0 items=0 ppid=28934 pid=28938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342681.465:350): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_AUTH msg=audit(1421342686.345:351): pid=29944 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="root" exe="/usr/bin/chfn" hostname=? addr=? terminal=pts/22 res=success' type=USER_ACCT msg=audit(1421342686.345:352): pid=29944 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/bin/chfn" hostname=? addr=? terminal=pts/22 res=success' type=USER_END msg=audit(1421342689.681:353): pid=28868 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_START msg=audit(1421342693.466:354): pid=30324 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_END msg=audit(1421342694.694:355): pid=30324 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_ACCT msg=audit(1421342702.058:356): pid=32440 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421342702.058:357): pid=32440 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421342702.058:358): pid=32440 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=17 res=1 type=USER_START msg=audit(1421342702.058:359): pid=32440 uid=0 auid=0 ses=17 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421342702.062:360): pid=32440 uid=0 auid=0 ses=17 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421342702.062:361): pid=32440 uid=0 auid=0 ses=17 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_START msg=audit(1421342746.681:362): pid=32464 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421342747.989:363): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=32478 comm="apparmor_parser" type=AVC msg=audit(1421342747.989:363): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=32478 comm="apparmor_parser" type=AVC msg=audit(1421342747.989:363): apparmor="STATUS" operation="profile_replace" name="third_party" pid=32478 comm="apparmor_parser" type=SYSCALL msg=audit(1421342747.989:363): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=784bc0 a2=f3db a3=7ffff93637e0 items=0 ppid=32474 pid=32478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342747.989:363): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_END msg=audit(1421342750.229:364): pid=32464 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=USER_START msg=audit(1421342781.159:365): pid=32502 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421342781.935:366): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=32518 comm="apparmor_parser" type=AVC msg=audit(1421342781.935:366): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=32518 comm="apparmor_parser" type=AVC msg=audit(1421342781.935:366): apparmor="STATUS" operation="profile_replace" name="third_party" pid=32518 comm="apparmor_parser" type=SYSCALL msg=audit(1421342781.935:366): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=247cbc0 a2=f3db a3=7fff9352bf20 items=0 ppid=32514 pid=32518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342781.935:366): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_END msg=audit(1421342835.465:367): pid=32502 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/9 res=success' type=AVC msg=audit(1421342856.654:368): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2090 comm="apparmor_parser" type=AVC msg=audit(1421342856.654:368): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2090 comm="apparmor_parser" type=AVC msg=audit(1421342856.654:368): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2090 comm="apparmor_parser" type=SYSCALL msg=audit(1421342856.654:368): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=24b2bc0 a2=f3db a3=7fff37dbc500 items=0 ppid=2086 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342856.654:368): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421342925.888:369): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2152 comm="apparmor_parser" type=AVC msg=audit(1421342925.888:369): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2152 comm="apparmor_parser" type=AVC msg=audit(1421342925.888:369): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2152 comm="apparmor_parser" type=SYSCALL msg=audit(1421342925.888:369): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1f21bc0 a2=f3db a3=7fff2a3f88d0 items=0 ppid=2148 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342925.888:369): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=ANOM_PROMISCUOUS msg=audit(1421342937.921:370): dev=eth1 prom=0 old_prom=256 auid=4294967295 uid=1000 gid=1000 ses=4294967295 type=SYSCALL msg=audit(1421342937.921:370): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c0485687 a2=7f5a30681590 a3=fffffffd items=0 ppid=17725 pid=18356 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="EMT-0" exe="/usr/lib/virtualbox/VirtualBox" key=(null) type=PROCTITLE msg=audit(1421342937.921:370): proctitle=2F7573722F6C69622F7669727475616C626F782F5669727475616C426F78002D2D636F6D6D656E74005562756E74752D31322E30342E352D69333836002D2D7374617274766D0034373232326631382D633264392D343835652D616666382D633266613435383461346661002D2D6E6F2D7374617274766D2D6572726F726D73 type=AVC msg=audit(1421342960.561:371): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2247 comm="apparmor_parser" type=AVC msg=audit(1421342960.561:371): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2247 comm="apparmor_parser" type=AVC msg=audit(1421342960.561:371): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2247 comm="apparmor_parser" type=SYSCALL msg=audit(1421342960.561:371): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1a2dbc0 a2=f3db a3=7fff9965a120 items=0 ppid=2243 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421342960.561:371): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343025.251:372): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2280 comm="apparmor_parser" type=AVC msg=audit(1421343025.251:372): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2280 comm="apparmor_parser" type=AVC msg=audit(1421343025.251:372): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2280 comm="apparmor_parser" type=SYSCALL msg=audit(1421343025.251:372): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=745bc0 a2=f3db a3=7ffff0a1a170 items=0 ppid=2276 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343025.251:372): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343058.010:373): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2310 comm="apparmor_parser" type=AVC msg=audit(1421343058.010:373): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2310 comm="apparmor_parser" type=AVC msg=audit(1421343058.010:373): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2310 comm="apparmor_parser" type=SYSCALL msg=audit(1421343058.010:373): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1906bc0 a2=f3db a3=7fffb29e71c0 items=0 ppid=2306 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343058.010:373): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343090.996:374): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2342 comm="apparmor_parser" type=AVC msg=audit(1421343090.996:374): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2342 comm="apparmor_parser" type=AVC msg=audit(1421343090.996:374): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2342 comm="apparmor_parser" type=SYSCALL msg=audit(1421343090.996:374): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1598bc0 a2=f3db a3=7fff8ad6db90 items=0 ppid=2338 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343090.996:374): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343123.747:375): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2405 comm="apparmor_parser" type=AVC msg=audit(1421343123.747:375): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2405 comm="apparmor_parser" type=AVC msg=audit(1421343123.747:375): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2405 comm="apparmor_parser" type=SYSCALL msg=audit(1421343123.747:375): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=af2bc0 a2=f3db a3=7fffd9f22a20 items=0 ppid=2401 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343123.747:375): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343186.227:376): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2440 comm="apparmor_parser" type=AVC msg=audit(1421343186.227:376): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2440 comm="apparmor_parser" type=AVC msg=audit(1421343186.227:376): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2440 comm="apparmor_parser" type=SYSCALL msg=audit(1421343186.227:376): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=145bbc0 a2=f3db a3=7fffb1c4fb10 items=0 ppid=2436 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343186.227:376): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343217.960:377): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2472 comm="apparmor_parser" type=AVC msg=audit(1421343217.960:377): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2472 comm="apparmor_parser" type=AVC msg=audit(1421343217.960:377): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2472 comm="apparmor_parser" type=SYSCALL msg=audit(1421343217.960:377): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=26afbc0 a2=f3db a3=7fff0fc65370 items=0 ppid=2468 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343217.960:377): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343285.024:378): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2508 comm="apparmor_parser" type=AVC msg=audit(1421343285.024:378): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2508 comm="apparmor_parser" type=AVC msg=audit(1421343285.024:378): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2508 comm="apparmor_parser" type=SYSCALL msg=audit(1421343285.024:378): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=14edbc0 a2=f3db a3=7fff983b0ac0 items=0 ppid=2504 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343285.024:378): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421343301.076:379): pid=2527 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421343301.076:380): pid=2527 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421343301.076:381): pid=2527 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=18 res=1 type=USER_START msg=audit(1421343301.080:382): pid=2527 uid=0 auid=0 ses=18 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421343301.080:383): pid=2527 uid=0 auid=0 ses=18 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421343301.080:384): pid=2527 uid=0 auid=0 ses=18 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421343320.857:385): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2542 comm="apparmor_parser" type=AVC msg=audit(1421343320.857:385): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2542 comm="apparmor_parser" type=AVC msg=audit(1421343320.857:385): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2542 comm="apparmor_parser" type=SYSCALL msg=audit(1421343320.857:385): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1874bc0 a2=f3db a3=7fff1cc00aa0 items=0 ppid=2538 pid=2542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343320.857:385): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343385.675:386): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2577 comm="apparmor_parser" type=AVC msg=audit(1421343385.675:386): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2577 comm="apparmor_parser" type=AVC msg=audit(1421343385.675:386): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2577 comm="apparmor_parser" type=SYSCALL msg=audit(1421343385.675:386): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1585bc0 a2=f3db a3=7fff37d2c0b0 items=0 ppid=2573 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343385.675:386): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343449.089:387): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2606 comm="apparmor_parser" type=AVC msg=audit(1421343449.089:387): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2606 comm="apparmor_parser" type=AVC msg=audit(1421343449.089:387): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2606 comm="apparmor_parser" type=SYSCALL msg=audit(1421343449.089:387): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=aaabc0 a2=f3db a3=7fff690a4cc0 items=0 ppid=2602 pid=2606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343449.089:387): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343481.401:388): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2630 comm="apparmor_parser" type=AVC msg=audit(1421343481.401:388): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2630 comm="apparmor_parser" type=AVC msg=audit(1421343481.401:388): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2630 comm="apparmor_parser" type=SYSCALL msg=audit(1421343481.401:388): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=25bfbc0 a2=f3db a3=7fffdf57c500 items=0 ppid=2626 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343481.401:388): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343513.622:389): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2659 comm="apparmor_parser" type=AVC msg=audit(1421343513.622:389): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2659 comm="apparmor_parser" type=AVC msg=audit(1421343513.622:389): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2659 comm="apparmor_parser" type=SYSCALL msg=audit(1421343513.622:389): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=179bbc0 a2=f3db a3=7fffe25bead0 items=0 ppid=2655 pid=2659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343513.622:389): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421343541.082:390): pid=2679 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421343541.082:391): pid=2679 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421343541.082:392): pid=2679 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=19 res=1 type=USER_START msg=audit(1421343541.082:393): pid=2679 uid=0 auid=0 ses=19 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421343542.034:394): pid=2679 uid=0 auid=0 ses=19 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421343542.034:395): pid=2679 uid=0 auid=0 ses=19 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421343579.015:396): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2705 comm="apparmor_parser" type=AVC msg=audit(1421343579.015:396): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2705 comm="apparmor_parser" type=AVC msg=audit(1421343579.015:396): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2705 comm="apparmor_parser" type=SYSCALL msg=audit(1421343579.015:396): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=22a1bc0 a2=f3db a3=7fff34a1d3b0 items=0 ppid=2700 pid=2705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343579.015:396): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343613.319:397): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2743 comm="apparmor_parser" type=AVC msg=audit(1421343613.319:397): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2743 comm="apparmor_parser" type=AVC msg=audit(1421343613.319:397): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2743 comm="apparmor_parser" type=SYSCALL msg=audit(1421343613.319:397): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1a5abc0 a2=f3db a3=7fff390ad330 items=0 ppid=2739 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343613.319:397): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343645.623:398): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2775 comm="apparmor_parser" type=AVC msg=audit(1421343645.623:398): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2775 comm="apparmor_parser" type=AVC msg=audit(1421343645.623:398): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2775 comm="apparmor_parser" type=SYSCALL msg=audit(1421343645.623:398): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1466bc0 a2=f3db a3=7fff8d92a050 items=0 ppid=2769 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343645.623:398): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343714.504:399): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=2901 comm="apparmor_parser" type=AVC msg=audit(1421343714.504:399): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=2901 comm="apparmor_parser" type=AVC msg=audit(1421343714.504:399): apparmor="STATUS" operation="profile_replace" name="third_party" pid=2901 comm="apparmor_parser" type=SYSCALL msg=audit(1421343714.504:399): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=19d1bc0 a2=f3db a3=7fff85326ef0 items=0 ppid=2897 pid=2901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343714.504:399): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343775.904:400): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=3835 comm="apparmor_parser" type=AVC msg=audit(1421343775.904:400): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=3835 comm="apparmor_parser" type=AVC msg=audit(1421343775.904:400): apparmor="STATUS" operation="profile_replace" name="third_party" pid=3835 comm="apparmor_parser" type=SYSCALL msg=audit(1421343775.904:400): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=b08bc0 a2=f3db a3=7fffdcd479c0 items=0 ppid=3831 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343775.904:400): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343808.108:401): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=3910 comm="apparmor_parser" type=AVC msg=audit(1421343808.108:401): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=3910 comm="apparmor_parser" type=AVC msg=audit(1421343808.108:401): apparmor="STATUS" operation="profile_replace" name="third_party" pid=3910 comm="apparmor_parser" type=SYSCALL msg=audit(1421343808.108:401): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=77ebc0 a2=f3db a3=7fffa0df68c0 items=0 ppid=3906 pid=3910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343808.108:401): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343840.135:402): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=3957 comm="apparmor_parser" type=AVC msg=audit(1421343840.135:402): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=3957 comm="apparmor_parser" type=AVC msg=audit(1421343840.135:402): apparmor="STATUS" operation="profile_replace" name="third_party" pid=3957 comm="apparmor_parser" type=SYSCALL msg=audit(1421343840.135:402): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=19c0bc0 a2=f3db a3=7fffc66cd870 items=0 ppid=3953 pid=3957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343840.135:402): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343872.043:403): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=3998 comm="apparmor_parser" type=AVC msg=audit(1421343872.043:403): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=3998 comm="apparmor_parser" type=AVC msg=audit(1421343872.043:403): apparmor="STATUS" operation="profile_replace" name="third_party" pid=3998 comm="apparmor_parser" type=SYSCALL msg=audit(1421343872.043:403): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=14cfbc0 a2=f3db a3=7ffffe5b9860 items=0 ppid=3994 pid=3998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343872.043:403): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421343901.247:404): pid=4021 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421343901.247:405): pid=4021 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421343901.247:406): pid=4021 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=20 res=1 type=USER_START msg=audit(1421343901.247:407): pid=4021 uid=0 auid=0 ses=20 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421343901.251:408): pid=4021 uid=0 auid=0 ses=20 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421343901.251:409): pid=4021 uid=0 auid=0 ses=20 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421343903.967:410): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4034 comm="apparmor_parser" type=AVC msg=audit(1421343903.967:410): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4034 comm="apparmor_parser" type=AVC msg=audit(1421343903.967:410): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4034 comm="apparmor_parser" type=SYSCALL msg=audit(1421343903.967:410): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=19a7bc0 a2=f3db a3=7ffff5ac4f00 items=0 ppid=4029 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343903.967:410): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343935.815:411): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4067 comm="apparmor_parser" type=AVC msg=audit(1421343935.815:411): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4067 comm="apparmor_parser" type=AVC msg=audit(1421343935.815:411): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4067 comm="apparmor_parser" type=SYSCALL msg=audit(1421343935.815:411): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1621bc0 a2=f3db a3=7fffa11c30a0 items=0 ppid=4063 pid=4067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343935.815:411): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421343967.718:412): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4093 comm="apparmor_parser" type=AVC msg=audit(1421343967.718:412): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4093 comm="apparmor_parser" type=AVC msg=audit(1421343967.718:412): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4093 comm="apparmor_parser" type=SYSCALL msg=audit(1421343967.718:412): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=747bc0 a2=f3db a3=7fffa089b320 items=0 ppid=4089 pid=4093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421343967.718:412): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344055.521:413): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4125 comm="apparmor_parser" type=AVC msg=audit(1421344055.521:413): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4125 comm="apparmor_parser" type=AVC msg=audit(1421344055.521:413): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4125 comm="apparmor_parser" type=SYSCALL msg=audit(1421344055.521:413): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=72abc0 a2=f3db a3=7fffaef96520 items=0 ppid=4121 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344055.521:413): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344117.916:414): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4154 comm="apparmor_parser" type=AVC msg=audit(1421344117.916:414): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4154 comm="apparmor_parser" type=AVC msg=audit(1421344117.916:414): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4154 comm="apparmor_parser" type=SYSCALL msg=audit(1421344117.916:414): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=cdcbc0 a2=f3db a3=7fff485f6da0 items=0 ppid=4150 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344117.916:414): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344149.744:415): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4187 comm="apparmor_parser" type=AVC msg=audit(1421344149.744:415): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4187 comm="apparmor_parser" type=AVC msg=audit(1421344149.744:415): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4187 comm="apparmor_parser" type=SYSCALL msg=audit(1421344149.744:415): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=995bc0 a2=f3db a3=7fff1b9ec210 items=0 ppid=4183 pid=4187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344149.744:415): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344210.639:416): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4223 comm="apparmor_parser" type=AVC msg=audit(1421344210.639:416): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4223 comm="apparmor_parser" type=AVC msg=audit(1421344210.639:416): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4223 comm="apparmor_parser" type=SYSCALL msg=audit(1421344210.639:416): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1190bc0 a2=f3db a3=7fffc23071a0 items=0 ppid=4219 pid=4223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344210.639:416): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344272.542:417): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4252 comm="apparmor_parser" type=AVC msg=audit(1421344272.542:417): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4252 comm="apparmor_parser" type=AVC msg=audit(1421344272.542:417): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4252 comm="apparmor_parser" type=SYSCALL msg=audit(1421344272.542:417): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2054bc0 a2=f3db a3=7fff74b8cb40 items=0 ppid=4248 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344272.542:417): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344336.928:418): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4282 comm="apparmor_parser" type=AVC msg=audit(1421344336.928:418): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4282 comm="apparmor_parser" type=AVC msg=audit(1421344336.928:418): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4282 comm="apparmor_parser" type=SYSCALL msg=audit(1421344336.928:418): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1684bc0 a2=f3db a3=7fffc2363580 items=0 ppid=4278 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344336.928:418): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344369.300:419): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4307 comm="apparmor_parser" type=AVC msg=audit(1421344369.300:419): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4307 comm="apparmor_parser" type=AVC msg=audit(1421344369.300:419): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4307 comm="apparmor_parser" type=SYSCALL msg=audit(1421344369.300:419): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=dd8bc0 a2=f3db a3=7fff8ca63380 items=0 ppid=4303 pid=4307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344369.300:419): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344401.479:420): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4335 comm="apparmor_parser" type=AVC msg=audit(1421344401.479:420): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4335 comm="apparmor_parser" type=AVC msg=audit(1421344401.479:420): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4335 comm="apparmor_parser" type=SYSCALL msg=audit(1421344401.479:420): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=204abc0 a2=f3db a3=7fff28259e60 items=0 ppid=4331 pid=4335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344401.479:420): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344463.414:421): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4364 comm="apparmor_parser" type=AVC msg=audit(1421344463.414:421): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4364 comm="apparmor_parser" type=AVC msg=audit(1421344463.414:421): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4364 comm="apparmor_parser" type=SYSCALL msg=audit(1421344463.414:421): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=88fbc0 a2=f3db a3=7fffd106cc50 items=0 ppid=4360 pid=4364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344463.414:421): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344495.809:422): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4389 comm="apparmor_parser" type=AVC msg=audit(1421344495.809:422): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4389 comm="apparmor_parser" type=AVC msg=audit(1421344495.809:422): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4389 comm="apparmor_parser" type=SYSCALL msg=audit(1421344495.809:422): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=126fbc0 a2=f3db a3=7fffc717a7e0 items=0 ppid=4385 pid=4389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344495.809:422): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421344501.257:423): pid=4406 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421344501.257:424): pid=4406 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421344501.257:425): pid=4406 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21 res=1 type=USER_START msg=audit(1421344501.257:426): pid=4406 uid=0 auid=0 ses=21 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421344501.261:427): pid=4406 uid=0 auid=0 ses=21 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421344501.261:428): pid=4406 uid=0 auid=0 ses=21 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421344563.344:429): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4444 comm="apparmor_parser" type=AVC msg=audit(1421344563.344:429): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4444 comm="apparmor_parser" type=AVC msg=audit(1421344563.344:429): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4444 comm="apparmor_parser" type=SYSCALL msg=audit(1421344563.344:429): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2597bc0 a2=f3db a3=7fff2c431c20 items=0 ppid=4440 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344563.344:429): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344595.473:430): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4472 comm="apparmor_parser" type=AVC msg=audit(1421344595.473:430): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4472 comm="apparmor_parser" type=AVC msg=audit(1421344595.473:430): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4472 comm="apparmor_parser" type=SYSCALL msg=audit(1421344595.473:430): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=bd1bc0 a2=f3db a3=7fff1e002680 items=0 ppid=4468 pid=4472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344595.473:430): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344660.381:431): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4501 comm="apparmor_parser" type=AVC msg=audit(1421344660.381:431): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4501 comm="apparmor_parser" type=AVC msg=audit(1421344660.381:431): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4501 comm="apparmor_parser" type=SYSCALL msg=audit(1421344660.381:431): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1383bc0 a2=f3db a3=7fffd5f9de80 items=0 ppid=4497 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344660.381:431): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344693.049:432): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4529 comm="apparmor_parser" type=AVC msg=audit(1421344693.049:432): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4529 comm="apparmor_parser" type=AVC msg=audit(1421344693.049:432): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4529 comm="apparmor_parser" type=SYSCALL msg=audit(1421344693.049:432): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=93abc0 a2=f3db a3=7fff2ebdcc80 items=0 ppid=4525 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344693.049:432): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344725.029:433): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4556 comm="apparmor_parser" type=AVC msg=audit(1421344725.029:433): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4556 comm="apparmor_parser" type=AVC msg=audit(1421344725.029:433): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4556 comm="apparmor_parser" type=SYSCALL msg=audit(1421344725.029:433): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1b45bc0 a2=f3db a3=7fff363b18e0 items=0 ppid=4552 pid=4556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344725.029:433): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344757.013:434): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=4587 comm="apparmor_parser" type=AVC msg=audit(1421344757.013:434): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=4587 comm="apparmor_parser" type=AVC msg=audit(1421344757.013:434): apparmor="STATUS" operation="profile_replace" name="third_party" pid=4587 comm="apparmor_parser" type=SYSCALL msg=audit(1421344757.013:434): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=2331bc0 a2=f3db a3=7fff1b520a50 items=0 ppid=4583 pid=4587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344757.013:434): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344790.481:435): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5072 comm="apparmor_parser" type=AVC msg=audit(1421344790.481:435): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5072 comm="apparmor_parser" type=AVC msg=audit(1421344790.481:435): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5072 comm="apparmor_parser" type=SYSCALL msg=audit(1421344790.481:435): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=8a1bc0 a2=f3db a3=7fff308d6520 items=0 ppid=5068 pid=5072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344790.481:435): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421344801.257:436): pid=5106 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421344801.257:437): pid=5106 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421344801.257:438): pid=5106 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22 res=1 type=USER_START msg=audit(1421344801.261:439): pid=5106 uid=0 auid=0 ses=22 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421344801.917:440): pid=5106 uid=0 auid=0 ses=22 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421344801.921:441): pid=5106 uid=0 auid=0 ses=22 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421344855.345:442): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5296 comm="apparmor_parser" type=AVC msg=audit(1421344855.345:442): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5296 comm="apparmor_parser" type=AVC msg=audit(1421344855.345:442): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5296 comm="apparmor_parser" type=SYSCALL msg=audit(1421344855.345:442): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=228dbc0 a2=f3db a3=7fffab255090 items=0 ppid=5292 pid=5296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344855.345:442): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=ANOM_PROMISCUOUS msg=audit(1421344881.585:443): dev=eth1 prom=256 old_prom=0 auid=4294967295 uid=1000 gid=1000 ses=4294967295 type=SYSCALL msg=audit(1421344881.585:443): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c0485687 a2=7fea7252d9f0 a3=fffffffd items=0 ppid=17725 pid=5361 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="EMT-0" exe="/usr/lib/virtualbox/VirtualBox" key=(null) type=PROCTITLE msg=audit(1421344881.585:443): proctitle=2F7573722F6C69622F7669727475616C626F782F5669727475616C426F78002D2D636F6D6D656E74005562756E74752D31322E30342E352D69333836002D2D7374617274766D0034373232326631382D633264392D343835652D616666382D633266613435383461346661002D2D6E6F2D7374617274766D2D6572726F726D73 type=AVC msg=audit(1421344887.725:444): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5403 comm="apparmor_parser" type=AVC msg=audit(1421344887.725:444): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5403 comm="apparmor_parser" type=AVC msg=audit(1421344887.725:444): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5403 comm="apparmor_parser" type=SYSCALL msg=audit(1421344887.725:444): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=96abc0 a2=f3db a3=7fff7e1fedd0 items=0 ppid=5399 pid=5403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344887.725:444): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=ANOM_PROMISCUOUS msg=audit(1421344904.749:445): dev=eth1 prom=0 old_prom=256 auid=4294967295 uid=1000 gid=1000 ses=4294967295 type=SYSCALL msg=audit(1421344904.749:445): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c0485687 a2=7fea7252d680 a3=fffffffd items=0 ppid=17725 pid=5361 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="EMT-0" exe="/usr/lib/virtualbox/VirtualBox" key=(null) type=PROCTITLE msg=audit(1421344904.749:445): proctitle=2F7573722F6C69622F7669727475616C626F782F5669727475616C426F78002D2D636F6D6D656E74005562756E74752D31322E30342E352D69333836002D2D7374617274766D0034373232326631382D633264392D343835652D616666382D633266613435383461346661002D2D6E6F2D7374617274766D2D6572726F726D73 type=ANOM_PROMISCUOUS msg=audit(1421344923.553:446): dev=eth1 prom=256 old_prom=0 auid=4294967295 uid=1000 gid=1000 ses=4294967295 type=SYSCALL msg=audit(1421344923.553:446): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c0485687 a2=7fea7252d9f0 a3=fffffffd items=0 ppid=17725 pid=5361 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="EMT-0" exe="/usr/lib/virtualbox/VirtualBox" key=(null) type=PROCTITLE msg=audit(1421344923.553:446): proctitle=2F7573722F6C69622F7669727475616C626F782F5669727475616C426F78002D2D636F6D6D656E74005562756E74752D31322E30342E352D69333836002D2D7374617274766D0034373232326631382D633264392D343835652D616666382D633266613435383461346661002D2D6E6F2D7374617274766D2D6572726F726D73 type=AVC msg=audit(1421344952.345:447): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5527 comm="apparmor_parser" type=AVC msg=audit(1421344952.345:447): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5527 comm="apparmor_parser" type=AVC msg=audit(1421344952.345:447): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5527 comm="apparmor_parser" type=SYSCALL msg=audit(1421344952.345:447): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1a1cbc0 a2=f3db a3=7fff99733940 items=0 ppid=5523 pid=5527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344952.345:447): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421344985.377:448): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5555 comm="apparmor_parser" type=AVC msg=audit(1421344985.377:448): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5555 comm="apparmor_parser" type=AVC msg=audit(1421344985.377:448): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5555 comm="apparmor_parser" type=SYSCALL msg=audit(1421344985.377:448): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=754bc0 a2=f3db a3=7fff62548a10 items=0 ppid=5551 pid=5555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421344985.377:448): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421345018.557:449): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5586 comm="apparmor_parser" type=AVC msg=audit(1421345018.557:449): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5586 comm="apparmor_parser" type=AVC msg=audit(1421345018.557:449): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5586 comm="apparmor_parser" type=SYSCALL msg=audit(1421345018.557:449): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=912bc0 a2=f3db a3=7fff44fb1aa0 items=0 ppid=5581 pid=5586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345018.557:449): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=ANOM_PROMISCUOUS msg=audit(1421345060.217:450): dev=eth1 prom=0 old_prom=256 auid=4294967295 uid=1000 gid=1000 ses=4294967295 type=SYSCALL msg=audit(1421345060.217:450): arch=c000003e syscall=16 success=yes exit=0 a0=b a1=c0485687 a2=7fea7252d680 a3=fffffffd items=0 ppid=17725 pid=5361 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="EMT-0" exe="/usr/lib/virtualbox/VirtualBox" key=(null) type=PROCTITLE msg=audit(1421345060.217:450): proctitle=2F7573722F6C69622F7669727475616C626F782F5669727475616C426F78002D2D636F6D6D656E74005562756E74752D31322E30342E352D69333836002D2D7374617274766D0034373232326631382D633264392D343835652D616666382D633266613435383461346661002D2D6E6F2D7374617274766D2D6572726F726D73 type=AVC msg=audit(1421345083.697:451): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5657 comm="apparmor_parser" type=AVC msg=audit(1421345083.697:451): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5657 comm="apparmor_parser" type=AVC msg=audit(1421345083.697:451): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5657 comm="apparmor_parser" type=SYSCALL msg=audit(1421345083.697:451): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=a1ebc0 a2=f3db a3=7fff9c287da0 items=0 ppid=5653 pid=5657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345083.697:451): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421345101.933:452): pid=5677 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421345101.933:453): pid=5677 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421345101.933:454): pid=5677 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23 res=1 type=USER_START msg=audit(1421345101.933:455): pid=5677 uid=0 auid=0 ses=23 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421345101.937:456): pid=5677 uid=0 auid=0 ses=23 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421345101.937:457): pid=5677 uid=0 auid=0 ses=23 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421345148.560:458): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5692 comm="apparmor_parser" type=AVC msg=audit(1421345148.560:458): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5692 comm="apparmor_parser" type=AVC msg=audit(1421345148.560:458): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5692 comm="apparmor_parser" type=SYSCALL msg=audit(1421345148.560:458): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=14bbbc0 a2=f3db a3=7fff3f440e00 items=0 ppid=5688 pid=5692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345148.560:458): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421345211.944:459): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5724 comm="apparmor_parser" type=AVC msg=audit(1421345211.944:459): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5724 comm="apparmor_parser" type=AVC msg=audit(1421345211.944:459): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5724 comm="apparmor_parser" type=SYSCALL msg=audit(1421345211.944:459): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=797bc0 a2=f3db a3=7fff4a3cb5e0 items=0 ppid=5717 pid=5724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345211.944:459): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421345244.872:460): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5753 comm="apparmor_parser" type=AVC msg=audit(1421345244.872:460): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5753 comm="apparmor_parser" type=AVC msg=audit(1421345244.872:460): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5753 comm="apparmor_parser" type=SYSCALL msg=audit(1421345244.872:460): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=12e2bc0 a2=f3db a3=7fff43b10fe0 items=0 ppid=5749 pid=5753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345244.872:460): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421345309.155:461): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5782 comm="apparmor_parser" type=AVC msg=audit(1421345309.155:461): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5782 comm="apparmor_parser" type=AVC msg=audit(1421345309.155:461): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5782 comm="apparmor_parser" type=SYSCALL msg=audit(1421345309.155:461): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=186fbc0 a2=f3db a3=7fff6cecd020 items=0 ppid=5778 pid=5782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345309.155:461): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=USER_ACCT msg=audit(1421345342.195:462): pid=5801 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421345342.195:463): pid=5801 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421345342.195:464): pid=5801 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=24 res=1 type=USER_START msg=audit(1421345342.195:465): pid=5801 uid=0 auid=0 ses=24 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421345343.239:466): pid=5801 uid=0 auid=0 ses=24 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421345343.239:467): pid=5801 uid=0 auid=0 ses=24 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421345343.303:468): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5820 comm="apparmor_parser" type=AVC msg=audit(1421345343.303:468): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5820 comm="apparmor_parser" type=AVC msg=audit(1421345343.303:468): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5820 comm="apparmor_parser" type=SYSCALL msg=audit(1421345343.303:468): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1027bc0 a2=f3db a3=7fff74956f70 items=0 ppid=5816 pid=5820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345343.303:468): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421345375.650:469): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5862 comm="apparmor_parser" type=AVC msg=audit(1421345375.650:469): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5862 comm="apparmor_parser" type=AVC msg=audit(1421345375.650:469): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5862 comm="apparmor_parser" type=SYSCALL msg=audit(1421345375.650:469): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=243bbc0 a2=f3db a3=7fff5e8a3d70 items=0 ppid=5858 pid=5862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345375.650:469): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421345437.674:470): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=5987 comm="apparmor_parser" type=AVC msg=audit(1421345437.674:470): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=5987 comm="apparmor_parser" type=AVC msg=audit(1421345437.674:470): apparmor="STATUS" operation="profile_replace" name="third_party" pid=5987 comm="apparmor_parser" type=SYSCALL msg=audit(1421345437.674:470): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=25bcbc0 a2=f3db a3=7fff9722e340 items=0 ppid=5983 pid=5987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345437.674:470): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421345500.085:471): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=6017 comm="apparmor_parser" type=AVC msg=audit(1421345500.085:471): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=6017 comm="apparmor_parser" type=AVC msg=audit(1421345500.085:471): apparmor="STATUS" operation="profile_replace" name="third_party" pid=6017 comm="apparmor_parser" type=SYSCALL msg=audit(1421345500.085:471): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=205cbc0 a2=f3db a3=7fff4fcfe7c0 items=0 ppid=6013 pid=6017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345500.085:471): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421345532.224:472): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=6046 comm="apparmor_parser" type=AVC msg=audit(1421345532.224:472): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=6046 comm="apparmor_parser" type=AVC msg=audit(1421345532.224:472): apparmor="STATUS" operation="profile_replace" name="third_party" pid=6046 comm="apparmor_parser" type=SYSCALL msg=audit(1421345532.224:472): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=1199bc0 a2=f3db a3=7fffb40d5ef0 items=0 ppid=6042 pid=6046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345532.224:472): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421345564.572:473): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=6074 comm="apparmor_parser" type=AVC msg=audit(1421345564.572:473): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=6074 comm="apparmor_parser" type=AVC msg=audit(1421345564.572:473): apparmor="STATUS" operation="profile_replace" name="third_party" pid=6074 comm="apparmor_parser" type=SYSCALL msg=audit(1421345564.572:473): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=c52bc0 a2=f3db a3=7fff91625c20 items=0 ppid=6070 pid=6074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345564.572:473): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=AVC msg=audit(1421345626.241:474): apparmor="STATUS" operation="profile_replace" name="/usr/lib/cups/backend/cups-pdf" pid=6103 comm="apparmor_parser" type=AVC msg=audit(1421345626.241:474): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/cupsd" pid=6103 comm="apparmor_parser" type=AVC msg=audit(1421345626.241:474): apparmor="STATUS" operation="profile_replace" name="third_party" pid=6103 comm="apparmor_parser" type=SYSCALL msg=audit(1421345626.241:474): arch=c000003e syscall=1 success=yes exit=62427 a0=3 a1=216abc0 a2=f3db a3=7fff21f18fc0 items=0 ppid=6099 pid=6103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" key=(null) type=PROCTITLE msg=audit(1421345626.241:474): proctitle=2F7362696E2F61707061726D6F725F706172736572002D72002D57002F6574632F61707061726D6F722E642F7573722E7362696E2E6375707364 type=DAEMON_END msg=audit(1421345665.454:7388): auditd normal halt, sending auid=0 pid=6621 subj= res=success type=DAEMON_START msg=audit(1421345762.530:8547): auditd start, ver=2.3.7 format=raw kernel=3.18.2-031802-generic auid=4294967295 pid=7374 subj=unconfined res=success type=CONFIG_CHANGE msg=audit(1421345763.517:43): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1 type=USER_AUTH msg=audit(1421345767.073:44): pid=7580 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421345767.085:45): pid=7580 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421345767.085:46): pid=7580 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421345770.085:47): pid=7580 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421345773.721:48): pid=7744 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421345773.893:49): pid=7744 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=NETFILTER_CFG msg=audit(1421345775.077:50): table=filter family=2 entries=0 type=SYSCALL msg=audit(1421345775.077:50): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7fb49c0b73d9 a2=0 a3=0 items=0 ppid=7875 pid=7876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421345775.077:50): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572 type=NETFILTER_CFG msg=audit(1421345775.245:51): table=filter family=2 entries=4 type=SYSCALL msg=audit(1421345775.245:51): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=78c730 items=0 ppid=6902 pid=7873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345775.245:51): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421345775.753:52): table=filter family=2 entries=5 type=SYSCALL msg=audit(1421345775.753:52): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=85d6d0 items=0 ppid=6902 pid=7879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345775.753:52): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421345775.757:53): table=filter family=2 entries=6 type=SYSCALL msg=audit(1421345775.757:53): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=22e36d0 items=0 ppid=6902 pid=7880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345775.757:53): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E73657274004F5554505554002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421345775.757:54): table=filter family=2 entries=7 type=SYSCALL msg=audit(1421345775.757:54): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=248b6d0 items=0 ppid=6902 pid=7881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345775.757:54): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421345775.757:55): table=filter family=2 entries=8 type=SYSCALL msg=audit(1421345775.757:55): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16c12a0 items=0 ppid=6902 pid=7882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345775.757:55): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421345775.865:56): table=filter family=2 entries=9 type=SYSCALL msg=audit(1421345775.865:56): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1685ba0 items=0 ppid=6902 pid=7883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345775.865:56): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6A756D700052454A454354 type=NETFILTER_CFG msg=audit(1421345775.925:57): table=filter family=2 entries=10 type=SYSCALL msg=audit(1421345775.925:57): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2518d20 items=0 ppid=6902 pid=7886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345775.925:57): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D6F75742D696E7465726661636500766972627230002D2D6A756D700052454A454354 type=NETFILTER_CFG msg=audit(1421345775.925:58): table=filter family=2 entries=11 type=SYSCALL msg=audit(1421345775.925:58): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=edb9a0 items=0 ppid=6902 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345775.925:58): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6F75742D696E7465726661636500766972627230002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421345775.925:59): table=filter family=2 entries=12 type=SYSCALL msg=audit(1421345775.925:59): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1505b20 items=0 ppid=6902 pid=7888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345775.925:59): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D736F75726365003139322E3136382E3132322E302F3234002D2D696E2D696E7465726661636500766972627230002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421345776.061:60): table=filter family=2 entries=13 type=SYSCALL msg=audit(1421345776.061:60): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=216ec10 items=0 ppid=6902 pid=7889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345776.061:60): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6F75742D696E7465726661636500766972627230002D2D6D6174636800636F6E6E747261636B002D2D63747374617465 type=NETFILTER_CFG msg=audit(1421345776.337:61): table=nat family=2 entries=0 type=SYSCALL msg=audit(1421345776.337:61): arch=c000003e syscall=313 success=yes exit=0 a0=2 a1=7ff0c77733d9 a2=0 a3=2 items=0 ppid=7895 pid=7896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421345776.337:61): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174 type=NETFILTER_CFG msg=audit(1421345776.337:62): table=nat family=2 entries=5 type=SYSCALL msg=audit(1421345776.337:62): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1de3600 items=0 ppid=6902 pid=7894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345776.337:62): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F32340000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552414445 type=NETFILTER_CFG msg=audit(1421345776.629:63): table=nat family=2 entries=6 type=SYSCALL msg=audit(1421345776.629:63): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=11886d0 items=0 ppid=6902 pid=7899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345776.629:63): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007564700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552 type=NETFILTER_CFG msg=audit(1421345776.633:64): table=nat family=2 entries=7 type=SYSCALL msg=audit(1421345776.633:64): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23d36d0 items=0 ppid=6902 pid=7900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345776.633:64): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007463700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552 type=NETFILTER_CFG msg=audit(1421345776.633:65): table=nat family=2 entries=8 type=SYSCALL msg=audit(1421345776.633:65): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f93370 items=0 ppid=6902 pid=7901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345776.633:65): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003235352E3235352E3235352E3235352F3332002D2D6A756D700052455455524E type=NETFILTER_CFG msg=audit(1421345776.637:66): table=nat family=2 entries=9 type=SYSCALL msg=audit(1421345776.637:66): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1fd94a0 items=0 ppid=6902 pid=7902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345776.637:66): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003232342E302E302E302F3234002D2D6A756D700052455455524E type=NETFILTER_CFG msg=audit(1421345776.773:67): table=mangle family=2 entries=0 type=SYSCALL msg=audit(1421345776.773:67): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7fd1e529c3d9 a2=0 a3=0 items=0 ppid=7904 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421345776.773:67): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65 type=NETFILTER_CFG msg=audit(1421345776.781:68): table=mangle family=2 entries=6 type=SYSCALL msg=audit(1421345776.781:68): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b25400 items=0 ppid=6902 pid=7903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421345776.781:68): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006D616E676C65002D2D696E7365727400504F5354524F5554494E47002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000434845434B53554D002D type=USER_END msg=audit(1421345778.605:69): pid=7580 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421345778.605:70): pid=7580 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421345778.609:71): pid=7924 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421345778.609:72): pid=7924 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421345778.609:73): pid=7924 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421345778.621:74): pid=7924 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_END msg=audit(1421345798.039:75): pid=7924 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421345798.039:76): pid=7924 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421345798.043:77): pid=8016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421345798.043:78): pid=8016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421345798.047:79): pid=8016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421345798.059:80): pid=8016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_END msg=audit(1421345803.013:81): pid=8016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421345803.013:82): pid=8016 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421345817.764:83): pid=8161 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1421345817.764:84): pid=8161 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_END msg=audit(1421345817.896:85): pid=7744 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_DISP msg=audit(1421345817.896:86): pid=7744 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1421345817.900:87): pid=8161 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421345818.016:88): pid=8161 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1421345821.545:89): pid=8749 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421345821.545:90): pid=8749 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421345821.545:91): pid=8749 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=1 res=1 type=USER_START msg=audit(1421345821.545:92): pid=8749 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421345823.246:93): pid=8749 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421345823.246:94): pid=8749 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421345823.534:95): apparmor="DENIED" operation="open" profile="/usr/bin/mediascanner-service-2.0" name="/usr/local/lib/libffi.so.6.0.1" pid=8700 comm="mediascanner-se" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421345823.534:95): arch=c000003e syscall=2 success=no exit=-13 a0=7f24c0305770 a1=80000 a2=7f24c02a2a18 a3=7f24bf3d506b items=0 ppid=8606 pid=8700 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="mediascanner-se" exe="/usr/bin/mediascanner-service-2.0" key=(null) type=PROCTITLE msg=audit(1421345823.534:95): proctitle="mediascanner-service-2.0" type=ANOM_ABEND msg=audit(1421345862.220:96): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9138 comm="unity-panel-ser" exe="/usr/lib/unity/unity-panel-service" sig=5 type=AVC msg=audit(1421345867.754:97): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/mission-control-5" name="/usr/local/lib/libffi.so.6.0.1" pid=10000 comm="mission-control" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421345867.754:97): arch=c000003e syscall=2 success=no exit=-13 a0=7fcacace3770 a1=80000 a2=7fcacac7f4f8 a3=7fcac982606b items=0 ppid=9999 pid=10000 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="mission-control" exe="/usr/lib/telepathy/mission-control-5" key=(null) type=PROCTITLE msg=audit(1421345867.754:97): proctitle="/usr/lib/telepathy/mission-control-5" type=ANOM_ABEND msg=audit(1421345876.758:98): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=10067 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=ANOM_ABEND msg=audit(1421345878.539:99): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=10167 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=ANOM_ABEND msg=audit(1421345878.663:100): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=10205 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=USER_AUTH msg=audit(1421345972.646:101): pid=10612 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/lib/policykit-1/polkit-agent-helper-1" hostname=? addr=? terminal=pts/11 res=success' type=USER_ACCT msg=audit(1421345972.646:102): pid=10612 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/lib/policykit-1/polkit-agent-helper-1" hostname=? addr=? terminal=pts/11 res=success' type=USER_START msg=audit(1421345972.654:103): pid=10600 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=pts/11 res=success' type=USER_AUTH msg=audit(1421345982.130:104): pid=10642 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1421345982.130:105): pid=10642 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421345982.134:106): pid=10642 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1421345992.479:107): pid=10642 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421346000.300:108): pid=11368 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1421346017.958:109): pid=11368 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421346024.183:110): pid=11442 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1421346027.246:111): pid=11442 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421346032.974:112): pid=11482 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1421346085.852:113): pid=11819 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_ACCT msg=audit(1421346085.852:114): pid=11819 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_START msg=audit(1421346085.852:115): pid=11819 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_END msg=audit(1421346085.876:116): pid=11819 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_START msg=audit(1421346088.610:117): pid=11836 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_END msg=audit(1421346089.634:118): pid=11836 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_START msg=audit(1421346264.848:119): pid=13520 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_END msg=audit(1421346264.888:120): pid=13520 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_ACCT msg=audit(1421346301.247:121): pid=13894 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421346301.251:122): pid=13894 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421346301.251:123): pid=13894 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=2 res=1 type=USER_START msg=audit(1421346301.251:124): pid=13894 uid=0 auid=0 ses=2 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421346301.395:125): pid=13894 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421346301.395:126): pid=13894 uid=0 auid=0 ses=2 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421346334.222:127): pid=11482 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421346345.662:128): pid=14144 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_END msg=audit(1421346523.977:129): pid=14144 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_START msg=audit(1421346544.529:130): pid=15451 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_END msg=audit(1421346544.881:131): pid=15451 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_START msg=audit(1421346557.982:132): pid=15621 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_END msg=audit(1421346559.206:133): pid=15621 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_START msg=audit(1421346628.630:134): pid=17407 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_END msg=audit(1421346628.650:135): pid=17407 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_START msg=audit(1421346644.044:136): pid=17476 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_END msg=audit(1421346657.681:137): pid=17476 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_START msg=audit(1421346666.983:138): pid=17608 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_END msg=audit(1421346667.639:139): pid=17608 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_START msg=audit(1421346685.491:140): pid=19129 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=USER_END msg=audit(1421346685.523:141): pid=19129 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/18 res=success' type=ANOM_ABEND msg=audit(1421346765.679:142): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=8700 comm="mediascanner-se" exe="/usr/bin/mediascanner-service-2.0" sig=11 type=USER_END msg=audit(1421346768.359:143): pid=8161 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_DISP msg=audit(1421346768.359:144): pid=8161 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=DAEMON_END msg=audit(1421346772.559:8548): auditd normal halt, sending auid=0 pid=20292 subj= res=success type=DAEMON_START msg=audit(1421346923.907:4282): auditd start, ver=2.3.7 format=raw kernel=3.18.2-031802-generic auid=4294967295 pid=6836 subj=unconfined res=success type=CONFIG_CHANGE msg=audit(1421346925.244:40): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1 type=USER_AUTH msg=audit(1421346930.064:41): pid=7536 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421346930.080:42): pid=7536 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421346930.080:43): pid=7536 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421346932.220:44): pid=7536 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421346932.544:45): pid=7671 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421346932.640:46): pid=7671 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=NETFILTER_CFG msg=audit(1421346942.019:47): table=filter family=2 entries=0 type=SYSCALL msg=audit(1421346942.019:47): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7f5ac19ed3d9 a2=0 a3=0 items=0 ppid=7835 pid=7836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421346942.019:47): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572 type=USER_END msg=audit(1421346943.411:48): pid=7536 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421346943.411:49): pid=7536 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421346943.415:50): pid=7853 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421346943.415:51): pid=7853 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421346943.415:52): pid=7853 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421346943.431:53): pid=7853 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=NETFILTER_CFG msg=audit(1421346943.135:54): table=filter family=2 entries=4 type=SYSCALL msg=audit(1421346943.135:54): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=11d6730 items=0 ppid=7259 pid=7832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346943.135:54): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421346945.091:55): table=filter family=2 entries=5 type=SYSCALL msg=audit(1421346945.091:55): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=22e26d0 items=0 ppid=7259 pid=7900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346945.091:55): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421346945.091:56): table=filter family=2 entries=6 type=SYSCALL msg=audit(1421346945.091:56): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1ad96d0 items=0 ppid=7259 pid=7901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346945.091:56): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E73657274004F5554505554002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421346945.095:57): table=filter family=2 entries=7 type=SYSCALL msg=audit(1421346945.095:57): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17246d0 items=0 ppid=7259 pid=7902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346945.095:57): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421346945.095:58): table=filter family=2 entries=8 type=SYSCALL msg=audit(1421346945.095:58): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=147d2a0 items=0 ppid=7259 pid=7903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346945.095:58): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421346945.259:59): table=filter family=2 entries=9 type=SYSCALL msg=audit(1421346945.259:59): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1425ba0 items=0 ppid=7259 pid=7904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346945.259:59): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6A756D700052454A454354 type=NETFILTER_CFG msg=audit(1421346945.379:60): table=filter family=2 entries=10 type=SYSCALL msg=audit(1421346945.379:60): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f73d20 items=0 ppid=7259 pid=7908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346945.379:60): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D6F75742D696E7465726661636500766972627230002D2D6A756D700052454A454354 type=NETFILTER_CFG msg=audit(1421346945.383:61): table=filter family=2 entries=11 type=SYSCALL msg=audit(1421346945.383:61): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c0d9a0 items=0 ppid=7259 pid=7909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346945.383:61): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6F75742D696E7465726661636500766972627230002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421346945.383:62): table=filter family=2 entries=12 type=SYSCALL msg=audit(1421346945.383:62): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a60b20 items=0 ppid=7259 pid=7910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346945.383:62): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D736F75726365003139322E3136382E3132322E302F3234002D2D696E2D696E7465726661636500766972627230002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421346946.283:63): table=filter family=2 entries=13 type=SYSCALL msg=audit(1421346946.283:63): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1855c10 items=0 ppid=7259 pid=7911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346946.283:63): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6F75742D696E7465726661636500766972627230002D2D6D6174636800636F6E6E747261636B002D2D63747374617465 type=NETFILTER_CFG msg=audit(1421346948.098:64): table=nat family=2 entries=0 type=SYSCALL msg=audit(1421346948.098:64): arch=c000003e syscall=313 success=yes exit=0 a0=2 a1=7fccd2d2f3d9 a2=0 a3=2 items=0 ppid=7923 pid=7924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421346948.098:64): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174 type=NETFILTER_CFG msg=audit(1421346948.102:65): table=nat family=2 entries=5 type=SYSCALL msg=audit(1421346948.102:65): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=263b600 items=0 ppid=7259 pid=7918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346948.102:65): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F32340000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552414445 type=NETFILTER_CFG msg=audit(1421346948.529:66): table=nat family=2 entries=6 type=SYSCALL msg=audit(1421346948.529:66): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=237b6d0 items=0 ppid=7259 pid=7934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346948.529:66): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007564700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552 type=NETFILTER_CFG msg=audit(1421346948.529:67): table=nat family=2 entries=7 type=SYSCALL msg=audit(1421346948.529:67): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25f96d0 items=0 ppid=7259 pid=7935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346948.529:67): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007463700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552 type=NETFILTER_CFG msg=audit(1421346948.533:68): table=nat family=2 entries=8 type=SYSCALL msg=audit(1421346948.533:68): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1757370 items=0 ppid=7259 pid=7936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346948.533:68): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003235352E3235352E3235352E3235352F3332002D2D6A756D700052455455524E type=NETFILTER_CFG msg=audit(1421346948.533:69): table=nat family=2 entries=9 type=SYSCALL msg=audit(1421346948.533:69): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24854a0 items=0 ppid=7259 pid=7937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346948.533:69): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003232342E302E302E302F3234002D2D6A756D700052455455524E type=NETFILTER_CFG msg=audit(1421346949.693:70): table=mangle family=2 entries=0 type=SYSCALL msg=audit(1421346949.693:70): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7f4281a763d9 a2=0 a3=0 items=0 ppid=7942 pid=7943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421346949.693:70): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65 type=NETFILTER_CFG msg=audit(1421346949.701:71): table=mangle family=2 entries=6 type=SYSCALL msg=audit(1421346949.701:71): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d49400 items=0 ppid=7259 pid=7938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421346949.701:71): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006D616E676C65002D2D696E7365727400504F5354524F5554494E47002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000434845434B53554D002D type=USER_END msg=audit(1421346963.601:72): pid=7853 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421346963.601:73): pid=7853 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421346963.605:74): pid=8000 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421346963.605:75): pid=8000 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421346963.605:76): pid=8000 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421346963.621:77): pid=8000 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_END msg=audit(1421346968.302:78): pid=8000 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421346968.302:79): pid=8000 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421346973.696:80): pid=8038 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1421346973.696:81): pid=8038 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_END msg=audit(1421346973.847:82): pid=7671 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_DISP msg=audit(1421346973.847:83): pid=7671 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1421346973.851:84): pid=8038 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421346974.023:85): pid=8038 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=AVC msg=audit(1421346983.886:86): apparmor="DENIED" operation="open" profile="/usr/bin/mediascanner-service-2.0" name="/usr/local/lib/libffi.so.6.0.1" pid=8624 comm="mediascanner-se" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421346983.886:86): arch=c000003e syscall=2 success=no exit=-13 a0=7ff0c93a9770 a1=80000 a2=7ff0c9346a18 a3=7ff0c847906b items=0 ppid=8366 pid=8624 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="mediascanner-se" exe="/usr/bin/mediascanner-service-2.0" key=(null) type=PROCTITLE msg=audit(1421346983.886:86): proctitle="mediascanner-service-2.0" type=ANOM_ABEND msg=audit(1421347015.832:87): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9779 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=ANOM_ABEND msg=audit(1421347017.551:88): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9884 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=ANOM_ABEND msg=audit(1421347017.671:89): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9922 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=USER_ACCT msg=audit(1421347141.842:90): pid=10002 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421347141.842:91): pid=10002 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421347141.842:92): pid=10002 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=1 res=1 type=USER_START msg=audit(1421347141.842:93): pid=10002 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421347142.238:94): pid=10002 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421347142.238:95): pid=10002 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421347176.998:96): pid=8038 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_DISP msg=audit(1421347176.998:97): pid=8038 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=DAEMON_END msg=audit(1421347179.511:4283): auditd normal halt, sending auid=0 pid=10495 subj= res=success type=DAEMON_START msg=audit(1421347244.144:8257): auditd start, ver=2.3.7 format=raw kernel=3.18.2-031802-generic auid=4294967295 pid=6835 subj=unconfined res=success type=CONFIG_CHANGE msg=audit(1421347245.053:43): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1 type=USER_AUTH msg=audit(1421347249.560:44): pid=7037 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421347249.572:45): pid=7037 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421347249.572:46): pid=7037 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421347250.664:47): pid=7144 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421347250.728:48): pid=7144 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421347251.460:49): pid=7037 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=NETFILTER_CFG msg=audit(1421347258.332:50): table=filter family=2 entries=0 type=SYSCALL msg=audit(1421347258.332:50): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7f48144403d9 a2=0 a3=0 items=0 ppid=7330 pid=7331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421347258.332:50): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572 type=NETFILTER_CFG msg=audit(1421347258.332:51): table=filter family=2 entries=4 type=SYSCALL msg=audit(1421347258.332:51): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1ea6730 items=0 ppid=6822 pid=7328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347258.332:51): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347258.644:52): table=filter family=2 entries=5 type=SYSCALL msg=audit(1421347258.644:52): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=258c6d0 items=0 ppid=6822 pid=7334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347258.644:52): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347258.644:53): table=filter family=2 entries=6 type=SYSCALL msg=audit(1421347258.644:53): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=205a6d0 items=0 ppid=6822 pid=7336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347258.644:53): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E73657274004F5554505554002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347258.648:54): table=filter family=2 entries=7 type=SYSCALL msg=audit(1421347258.648:54): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1da96d0 items=0 ppid=6822 pid=7337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347258.648:54): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347258.648:55): table=filter family=2 entries=8 type=SYSCALL msg=audit(1421347258.648:55): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ef5220 items=0 ppid=6822 pid=7338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347258.648:55): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347258.744:56): table=filter family=2 entries=9 type=SYSCALL msg=audit(1421347258.744:56): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=218cba0 items=0 ppid=6822 pid=7339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347258.744:56): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6A756D700052454A454354 type=NETFILTER_CFG msg=audit(1421347259.036:57): table=filter family=2 entries=10 type=SYSCALL msg=audit(1421347259.036:57): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23b4d20 items=0 ppid=6822 pid=7342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347259.036:57): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D6F75742D696E7465726661636500766972627230002D2D6A756D700052454A454354 type=NETFILTER_CFG msg=audit(1421347259.040:58): table=filter family=2 entries=11 type=SYSCALL msg=audit(1421347259.040:58): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f649a0 items=0 ppid=6822 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347259.040:58): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6F75742D696E7465726661636500766972627230002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347259.040:59): table=filter family=2 entries=12 type=SYSCALL msg=audit(1421347259.040:59): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1173b20 items=0 ppid=6822 pid=7344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347259.040:59): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D736F75726365003139322E3136382E3132322E302F3234002D2D696E2D696E7465726661636500766972627230002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347259.180:60): table=filter family=2 entries=13 type=SYSCALL msg=audit(1421347259.180:60): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1e11c10 items=0 ppid=6822 pid=7345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347259.180:60): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6F75742D696E7465726661636500766972627230002D2D6D6174636800636F6E6E747261636B002D2D63747374617465 type=NETFILTER_CFG msg=audit(1421347259.532:61): table=nat family=2 entries=0 type=SYSCALL msg=audit(1421347259.532:61): arch=c000003e syscall=313 success=yes exit=0 a0=2 a1=7f468af463d9 a2=0 a3=2 items=0 ppid=7352 pid=7353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421347259.532:61): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174 type=NETFILTER_CFG msg=audit(1421347259.536:62): table=nat family=2 entries=5 type=SYSCALL msg=audit(1421347259.536:62): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8ad600 items=0 ppid=6822 pid=7351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347259.536:62): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F32340000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552414445 type=NETFILTER_CFG msg=audit(1421347259.872:63): table=nat family=2 entries=6 type=SYSCALL msg=audit(1421347259.872:63): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a166d0 items=0 ppid=6822 pid=7356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347259.872:63): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007564700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552 type=NETFILTER_CFG msg=audit(1421347259.872:64): table=nat family=2 entries=7 type=SYSCALL msg=audit(1421347259.872:64): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e9d6d0 items=0 ppid=6822 pid=7357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347259.872:64): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007463700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552 type=NETFILTER_CFG msg=audit(1421347259.872:65): table=nat family=2 entries=8 type=SYSCALL msg=audit(1421347259.872:65): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=234a370 items=0 ppid=6822 pid=7358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347259.872:65): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003235352E3235352E3235352E3235352F3332002D2D6A756D700052455455524E type=NETFILTER_CFG msg=audit(1421347259.876:66): table=nat family=2 entries=9 type=SYSCALL msg=audit(1421347259.876:66): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7d44a0 items=0 ppid=6822 pid=7359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347259.876:66): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003232342E302E302E302F3234002D2D6A756D700052455455524E type=NETFILTER_CFG msg=audit(1421347259.976:67): table=mangle family=2 entries=0 type=SYSCALL msg=audit(1421347259.976:67): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7f10881ed3d9 a2=0 a3=0 items=0 ppid=7361 pid=7362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421347259.976:67): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65 type=NETFILTER_CFG msg=audit(1421347259.980:68): table=mangle family=2 entries=6 type=SYSCALL msg=audit(1421347259.980:68): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1243380 items=0 ppid=6822 pid=7360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347259.980:68): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006D616E676C65002D2D696E7365727400504F5354524F5554494E47002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000434845434B53554D002D type=USER_END msg=audit(1421347260.348:69): pid=7037 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421347260.348:70): pid=7037 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421347260.352:71): pid=7377 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421347260.352:72): pid=7377 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421347260.356:73): pid=7377 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421347260.368:74): pid=7377 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_END msg=audit(1421347278.175:75): pid=7377 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421347278.175:76): pid=7377 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421347278.179:77): pid=7443 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421347278.179:78): pid=7443 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421347278.179:79): pid=7443 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421347278.195:80): pid=7443 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_END msg=audit(1421347282.495:81): pid=7443 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421347282.495:82): pid=7443 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421347289.323:83): pid=7507 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1421347289.323:84): pid=7507 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_END msg=audit(1421347289.379:85): pid=7144 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_DISP msg=audit(1421347289.379:86): pid=7144 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1421347289.379:87): pid=7507 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421347289.463:88): pid=7507 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=AVC msg=audit(1421347296.054:89): apparmor="DENIED" operation="open" profile="/usr/bin/mediascanner-service-2.0" name="/usr/local/lib/libffi.so.6.0.1" pid=8057 comm="mediascanner-se" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421347296.054:89): arch=c000003e syscall=2 success=no exit=-13 a0=7f55372fa770 a1=80000 a2=7f5537297a18 a3=7f55363ca06b items=0 ppid=7806 pid=8057 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="mediascanner-se" exe="/usr/bin/mediascanner-service-2.0" key=(null) type=PROCTITLE msg=audit(1421347296.054:89): proctitle="mediascanner-service-2.0" type=ANOM_ABEND msg=audit(1421347334.764:90): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=8341 comm="unity-panel-ser" exe="/usr/lib/unity/unity-panel-service" sig=5 type=AVC msg=audit(1421347340.504:91): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/mission-control-5" name="/usr/local/lib/libffi.so.6.0.1" pid=9400 comm="mission-control" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421347340.504:91): arch=c000003e syscall=2 success=no exit=-13 a0=7fbf20e1d770 a1=80000 a2=7fbf20db94f8 a3=7fbf1f96006b items=0 ppid=9399 pid=9400 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="mission-control" exe="/usr/lib/telepathy/mission-control-5" key=(null) type=PROCTITLE msg=audit(1421347340.504:91): proctitle="/usr/lib/telepathy/mission-control-5" type=ANOM_ABEND msg=audit(1421347353.536:92): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9455 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=ANOM_ABEND msg=audit(1421347355.827:93): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9532 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=ANOM_ABEND msg=audit(1421347356.079:94): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9557 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=USER_AUTH msg=audit(1421347418.628:95): pid=9821 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1421347418.628:96): pid=9821 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421347418.628:97): pid=9821 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1421347502.012:98): pid=10066 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421347502.012:99): pid=10066 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421347502.012:100): pid=10066 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=1 res=1 type=USER_START msg=audit(1421347502.012:101): pid=10066 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421347502.020:102): pid=10066 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421347502.020:103): pid=10066 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1421347637.272:104): pid=11171 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success' type=USER_ACCT msg=audit(1421347637.272:105): pid=11171 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success' type=USER_START msg=audit(1421347637.272:106): pid=11171 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success' type=USER_END msg=audit(1421347638.580:107): pid=11171 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success' type=USER_START msg=audit(1421347665.105:108): pid=11920 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success' type=USER_END msg=audit(1421347665.273:109): pid=11920 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success' type=USER_END msg=audit(1421347665.277:110): pid=9821 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=DAEMON_END msg=audit(1421347700.989:8258): auditd normal halt, sending auid=0 pid=12458 subj= res=success type=DAEMON_START msg=audit(1421347762.886:1861): auditd start, ver=2.3.7 format=raw kernel=3.18.2-031802-generic auid=4294967295 pid=6623 subj=unconfined res=success type=CONFIG_CHANGE msg=audit(1421347763.755:43): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1 type=USER_AUTH msg=audit(1421347768.367:44): pid=6832 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421347768.379:45): pid=6832 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421347768.379:46): pid=6832 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421347770.211:47): pid=6832 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421347772.099:48): pid=6982 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421347772.263:49): pid=6982 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=NETFILTER_CFG msg=audit(1421347776.550:50): table=filter family=2 entries=0 type=SYSCALL msg=audit(1421347776.550:50): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7fca4e0013d9 a2=0 a3=0 items=0 ppid=7139 pid=7140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421347776.550:50): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572 type=NETFILTER_CFG msg=audit(1421347776.730:51): table=filter family=2 entries=4 type=SYSCALL msg=audit(1421347776.730:51): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=22fd730 items=0 ppid=6760 pid=7137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347776.730:51): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347777.038:52): table=filter family=2 entries=5 type=SYSCALL msg=audit(1421347777.038:52): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ab56d0 items=0 ppid=6760 pid=7143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347777.038:52): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347777.042:53): table=filter family=2 entries=6 type=SYSCALL msg=audit(1421347777.042:53): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10426d0 items=0 ppid=6760 pid=7144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347777.042:53): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E73657274004F5554505554002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347777.042:54): table=filter family=2 entries=7 type=SYSCALL msg=audit(1421347777.042:54): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10816d0 items=0 ppid=6760 pid=7145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347777.042:54): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347777.042:55): table=filter family=2 entries=8 type=SYSCALL msg=audit(1421347777.042:55): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ef5220 items=0 ppid=6760 pid=7146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347777.042:55): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347777.226:56): table=filter family=2 entries=9 type=SYSCALL msg=audit(1421347777.226:56): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2067ba0 items=0 ppid=6760 pid=7147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347777.226:56): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6A756D700052454A454354 type=NETFILTER_CFG msg=audit(1421347777.270:57): table=filter family=2 entries=10 type=SYSCALL msg=audit(1421347777.270:57): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1197d20 items=0 ppid=6760 pid=7150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347777.270:57): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D6F75742D696E7465726661636500766972627230002D2D6A756D700052454A454354 type=NETFILTER_CFG msg=audit(1421347777.270:58): table=filter family=2 entries=11 type=SYSCALL msg=audit(1421347777.270:58): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=194c9a0 items=0 ppid=6760 pid=7151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347777.270:58): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6F75742D696E7465726661636500766972627230002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347777.274:59): table=filter family=2 entries=12 type=SYSCALL msg=audit(1421347777.274:59): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=df1b20 items=0 ppid=6760 pid=7152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347777.274:59): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D736F75726365003139322E3136382E3132322E302F3234002D2D696E2D696E7465726661636500766972627230002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421347777.558:60): table=filter family=2 entries=13 type=SYSCALL msg=audit(1421347777.558:60): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=208dc10 items=0 ppid=6760 pid=7153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347777.558:60): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6F75742D696E7465726661636500766972627230002D2D6D6174636800636F6E6E747261636B002D2D63747374617465 type=NETFILTER_CFG msg=audit(1421347777.906:61): table=nat family=2 entries=0 type=SYSCALL msg=audit(1421347777.906:61): arch=c000003e syscall=313 success=yes exit=0 a0=2 a1=7fc2ed0383d9 a2=0 a3=2 items=0 ppid=7159 pid=7160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421347777.906:61): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174 type=NETFILTER_CFG msg=audit(1421347777.910:62): table=nat family=2 entries=5 type=SYSCALL msg=audit(1421347777.910:62): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f1d600 items=0 ppid=6760 pid=7158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347777.910:62): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F32340000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552414445 type=NETFILTER_CFG msg=audit(1421347778.034:63): table=nat family=2 entries=6 type=SYSCALL msg=audit(1421347778.034:63): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=180b6d0 items=0 ppid=6760 pid=7163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347778.034:63): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007564700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552 type=NETFILTER_CFG msg=audit(1421347778.034:64): table=nat family=2 entries=7 type=SYSCALL msg=audit(1421347778.034:64): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e6e6d0 items=0 ppid=6760 pid=7164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347778.034:64): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007463700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552 type=NETFILTER_CFG msg=audit(1421347778.034:65): table=nat family=2 entries=8 type=SYSCALL msg=audit(1421347778.034:65): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=171b370 items=0 ppid=6760 pid=7165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347778.034:65): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003235352E3235352E3235352E3235352F3332002D2D6A756D700052455455524E type=NETFILTER_CFG msg=audit(1421347778.038:66): table=nat family=2 entries=9 type=SYSCALL msg=audit(1421347778.038:66): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1fd64a0 items=0 ppid=6760 pid=7166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347778.038:66): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003232342E302E302E302F3234002D2D6A756D700052455455524E type=NETFILTER_CFG msg=audit(1421347778.126:67): table=mangle family=2 entries=0 type=SYSCALL msg=audit(1421347778.126:67): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7feda4f6c3d9 a2=0 a3=0 items=0 ppid=7168 pid=7169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421347778.126:67): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65 type=NETFILTER_CFG msg=audit(1421347778.134:68): table=mangle family=2 entries=6 type=SYSCALL msg=audit(1421347778.134:68): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1880380 items=0 ppid=6760 pid=7167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421347778.134:68): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006D616E676C65002D2D696E7365727400504F5354524F5554494E47002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000434845434B53554D002D type=USER_END msg=audit(1421347782.910:69): pid=6832 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421347782.910:70): pid=6832 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421347782.918:71): pid=7192 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421347782.918:72): pid=7192 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421347782.918:73): pid=7192 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421347782.930:74): pid=7192 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_END msg=audit(1421347802.313:75): pid=7192 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421347802.313:76): pid=7192 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421347802.317:77): pid=7255 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421347802.317:78): pid=7255 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421347802.317:79): pid=7255 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421347802.333:80): pid=7255 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_END msg=audit(1421347803.965:81): pid=7255 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421347803.965:82): pid=7255 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421347811.437:83): pid=7348 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1421347811.437:84): pid=7348 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_END msg=audit(1421347811.541:85): pid=6982 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_DISP msg=audit(1421347811.545:86): pid=6982 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="lightdm" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1421347811.545:87): pid=7348 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421347811.785:88): pid=7348 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=AVC msg=audit(1421347817.116:89): apparmor="DENIED" operation="open" profile="/usr/bin/mediascanner-service-2.0" name="/usr/local/lib/libffi.so.6.0.1" pid=7881 comm="mediascanner-se" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421347817.116:89): arch=c000003e syscall=2 success=no exit=-13 a0=7fee2f871770 a1=80000 a2=7fee2f80ea18 a3=7fee2e94106b items=0 ppid=7785 pid=7881 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="mediascanner-se" exe="/usr/bin/mediascanner-service-2.0" key=(null) type=PROCTITLE msg=audit(1421347817.116:89): proctitle="mediascanner-service-2.0" type=ANOM_ABEND msg=audit(1421347855.367:90): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=8229 comm="unity-panel-ser" exe="/usr/lib/unity/unity-panel-service" sig=5 type=AVC msg=audit(1421347862.762:91): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/mission-control-5" name="/usr/local/lib/libffi.so.6.0.1" pid=9203 comm="mission-control" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421347862.762:91): arch=c000003e syscall=2 success=no exit=-13 a0=7f4326700770 a1=80000 a2=7f432669c4f8 a3=7f432524306b items=0 ppid=9202 pid=9203 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="mission-control" exe="/usr/lib/telepathy/mission-control-5" key=(null) type=PROCTITLE msg=audit(1421347862.762:91): proctitle="/usr/lib/telepathy/mission-control-5" type=ANOM_ABEND msg=audit(1421347877.830:92): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9278 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=ANOM_ABEND msg=audit(1421347879.429:93): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9392 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=ANOM_ABEND msg=audit(1421347879.653:94): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9459 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=USER_AUTH msg=audit(1421347918.204:95): pid=10391 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_ACCT msg=audit(1421347918.204:96): pid=10391 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_START msg=audit(1421347918.208:97): pid=10391 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_AUTH msg=audit(1421347975.531:98): pid=10681 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/7 res=success' type=USER_ACCT msg=audit(1421347975.531:99): pid=10681 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/7 res=success' type=USER_START msg=audit(1421347975.531:100): pid=10681 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/7 res=success' type=USER_AUTH msg=audit(1421347979.700:101): pid=10571 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/5 res=success' type=USER_ACCT msg=audit(1421347979.704:102): pid=10571 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/5 res=success' type=USER_START msg=audit(1421347979.704:103): pid=10571 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/5 res=success' type=USER_END msg=audit(1421348093.986:104): pid=10391 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_ACCT msg=audit(1421348101.422:105): pid=11799 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421348101.422:106): pid=11799 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421348101.422:107): pid=11799 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=1 res=1 type=USER_START msg=audit(1421348101.422:108): pid=11799 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421348101.466:109): pid=11799 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421348101.466:110): pid=11799 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_START msg=audit(1421348134.800:111): pid=11815 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_END msg=audit(1421348135.811:112): pid=11815 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_START msg=audit(1421348144.263:113): pid=12514 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_END msg=audit(1421348144.806:114): pid=12514 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_START msg=audit(1421348157.868:115): pid=12520 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_END msg=audit(1421348161.934:116): pid=12520 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_START msg=audit(1421348164.936:117): pid=12575 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_END msg=audit(1421348165.136:118): pid=12575 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/34 res=success' type=USER_END msg=audit(1421348165.176:119): pid=10571 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/5 res=success' type=USER_END msg=audit(1421348165.176:120): pid=10681 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/7 res=success' type=USER_END msg=audit(1421348166.755:121): pid=7348 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=CRED_DISP msg=audit(1421348166.755:122): pid=7348 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="richter" exe="/usr/sbin/lightdm" hostname=? addr=? terminal=:0 res=success' type=DAEMON_END msg=audit(1421348169.062:1862): auditd normal halt, sending auid=0 pid=13121 subj= res=success type=DAEMON_START msg=audit(1421348229.585:9881): auditd start, ver=2.3.7 format=raw kernel=3.18.2-031802-generic auid=4294967295 pid=6755 subj=unconfined res=success type=CONFIG_CHANGE msg=audit(1421348231.181:43): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 res=1 type=USER_AUTH msg=audit(1421348233.545:44): pid=6915 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421348233.645:45): pid=6915 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421348233.645:46): pid=6915 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421348234.357:47): pid=6915 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=NETFILTER_CFG msg=audit(1421348237.908:48): table=filter family=2 entries=0 type=SYSCALL msg=audit(1421348237.908:48): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7ff4790013d9 a2=0 a3=0 items=0 ppid=7055 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421348237.908:48): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572 type=USER_END msg=audit(1421348238.192:49): pid=6915 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421348238.192:50): pid=6915 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421348238.200:51): pid=7069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421348238.200:52): pid=7069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421348238.200:53): pid=7069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421348238.212:54): pid=7069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=NETFILTER_CFG msg=audit(1421348238.120:55): table=filter family=2 entries=4 type=SYSCALL msg=audit(1421348238.120:55): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8f1730 items=0 ppid=6731 pid=7052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348238.120:55): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421348238.976:56): table=filter family=2 entries=5 type=SYSCALL msg=audit(1421348238.976:56): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e596d0 items=0 ppid=6731 pid=7082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348238.976:56): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003637002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421348238.976:57): table=filter family=2 entries=6 type=SYSCALL msg=audit(1421348238.976:57): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a2b6d0 items=0 ppid=6731 pid=7091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348238.976:57): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E73657274004F5554505554002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421348238.980:58): table=filter family=2 entries=7 type=SYSCALL msg=audit(1421348238.980:58): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a836d0 items=0 ppid=6731 pid=7092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348238.980:58): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00746370002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421348238.980:59): table=filter family=2 entries=8 type=SYSCALL msg=audit(1421348238.980:59): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1dac220 items=0 ppid=6731 pid=7093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348238.980:59): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400494E505554002D2D696E2D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003533002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421348239.416:60): table=filter family=2 entries=9 type=SYSCALL msg=audit(1421348239.416:60): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a0dba0 items=0 ppid=6731 pid=7094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348239.416:60): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6A756D700052454A454354 type=NETFILTER_CFG msg=audit(1421348239.920:61): table=filter family=2 entries=10 type=SYSCALL msg=audit(1421348239.920:61): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b46d20 items=0 ppid=6731 pid=7108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348239.920:61): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D6F75742D696E7465726661636500766972627230002D2D6A756D700052454A454354 type=NETFILTER_CFG msg=audit(1421348239.920:62): table=filter family=2 entries=11 type=SYSCALL msg=audit(1421348239.920:62): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=231b9a0 items=0 ppid=6731 pid=7109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348239.920:62): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D696E2D696E7465726661636500766972627230002D2D6F75742D696E7465726661636500766972627230002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421348239.920:63): table=filter family=2 entries=12 type=SYSCALL msg=audit(1421348239.920:63): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a4ab20 items=0 ppid=6731 pid=7110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348239.920:63): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D736F75726365003139322E3136382E3132322E302F3234002D2D696E2D696E7465726661636500766972627230002D2D6A756D7000414343455054 type=NETFILTER_CFG msg=audit(1421348240.092:64): table=filter family=2 entries=13 type=SYSCALL msg=audit(1421348240.092:64): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1285c10 items=0 ppid=6731 pid=7111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348240.092:64): proctitle=2F7362696E2F69707461626C6573002D2D7461626C650066696C746572002D2D696E7365727400464F5257415244002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6F75742D696E7465726661636500766972627230002D2D6D6174636800636F6E6E747261636B002D2D63747374617465 type=NETFILTER_CFG msg=audit(1421348240.628:65): table=nat family=2 entries=0 type=SYSCALL msg=audit(1421348240.628:65): arch=c000003e syscall=313 success=yes exit=0 a0=2 a1=7fa39fc643d9 a2=0 a3=2 items=0 ppid=7120 pid=7121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421348240.628:65): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174 type=NETFILTER_CFG msg=audit(1421348240.628:66): table=nat family=2 entries=5 type=SYSCALL msg=audit(1421348240.628:66): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1c0e600 items=0 ppid=6731 pid=7119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348240.628:66): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F32340000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552414445 type=NETFILTER_CFG msg=audit(1421348241.184:67): table=nat family=2 entries=6 type=SYSCALL msg=audit(1421348241.184:67): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=240c6d0 items=0 ppid=6731 pid=7137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348241.184:67): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007564700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552 type=NETFILTER_CFG msg=audit(1421348241.184:68): table=nat family=2 entries=7 type=SYSCALL msg=audit(1421348241.184:68): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9466d0 items=0 ppid=6731 pid=7138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348241.184:68): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D70007463700000002D2D64657374696E6174696F6E003139322E3136382E3132322E302F3234002D2D6A756D70004D415351554552 type=NETFILTER_CFG msg=audit(1421348241.188:69): table=nat family=2 entries=8 type=SYSCALL msg=audit(1421348241.188:69): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=835370 items=0 ppid=6731 pid=7139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348241.188:69): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003235352E3235352E3235352E3235352F3332002D2D6A756D700052455455524E type=NETFILTER_CFG msg=audit(1421348241.188:70): table=nat family=2 entries=9 type=SYSCALL msg=audit(1421348241.188:70): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bc24a0 items=0 ppid=6731 pid=7140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348241.188:70): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006E6174002D2D696E7365727400504F5354524F5554494E47002D2D736F75726365003139322E3136382E3132322E302F3234002D2D64657374696E6174696F6E003232342E302E302E302F3234002D2D6A756D700052455455524E type=NETFILTER_CFG msg=audit(1421348241.616:71): table=mangle family=2 entries=0 type=SYSCALL msg=audit(1421348241.616:71): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=7f7a026233d9 a2=0 a3=0 items=0 ppid=7198 pid=7199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/bin/kmod" key=(null) type=PROCTITLE msg=audit(1421348241.616:71): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65 type=NETFILTER_CFG msg=audit(1421348241.620:72): table=mangle family=2 entries=6 type=SYSCALL msg=audit(1421348241.620:72): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1e79380 items=0 ppid=6731 pid=7141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/sbin/xtables-multi" key=(null) type=PROCTITLE msg=audit(1421348241.620:72): proctitle=2F7362696E2F69707461626C6573002D2D7461626C65006D616E676C65002D2D696E7365727400504F5354524F5554494E47002D2D6F75742D696E7465726661636500766972627230002D2D70726F746F636F6C00756470002D2D64657374696E6174696F6E2D706F7274003638002D2D6A756D7000434845434B53554D002D type=USER_END msg=audit(1421348250.692:73): pid=7069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421348250.692:74): pid=7069 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421348250.696:75): pid=7223 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_ACCT msg=audit(1421348250.696:76): pid=7223 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_ACQ msg=audit(1421348250.696:77): pid=7223 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_START msg=audit(1421348250.712:78): pid=7223 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_END msg=audit(1421348252.656:79): pid=7223 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=CRED_DISP msg=audit(1421348252.656:80): pid=7223 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="flumotion" exe="/bin/su" hostname=? addr=? terminal=/dev/console res=success' type=USER_AUTH msg=audit(1421348265.387:81): pid=7688 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="gdm" exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1421348265.391:82): pid=7688 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="gdm" exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1421348265.391:83): pid=7688 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="gdm" exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421348266.923:84): pid=7688 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="gdm" exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=AVC msg=audit(1421348296.838:85): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/mission-control-5" name="/usr/local/lib/libffi.so.6.0.1" pid=8675 comm="mission-control" requested_mask="r" denied_mask="r" fsuid=139 ouid=0 type=SYSCALL msg=audit(1421348296.838:85): arch=c000003e syscall=2 success=no exit=-13 a0=7f6726229770 a1=80000 a2=7f67261c54f8 a3=7f6724d6c06b items=0 ppid=8674 pid=8675 auid=4294967295 uid=139 gid=152 euid=139 suid=139 fsuid=139 egid=152 sgid=152 fsgid=152 tty=(none) ses=4294967295 comm="mission-control" exe="/usr/lib/telepathy/mission-control-5" key=(null) type=PROCTITLE msg=audit(1421348296.838:85): proctitle="/usr/lib/telepathy/mission-control-5" type=AVC msg=audit(1421348296.838:86): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/mission-control-5" name="/etc/dconf/profile/gdm" pid=8675 comm="mission-control" requested_mask="r" denied_mask="r" fsuid=139 ouid=0 type=SYSCALL msg=audit(1421348296.838:86): arch=c000003e syscall=2 success=no exit=-13 a0=d718a0 a1=0 a2=1b6 a3=7fffc356ebc0 items=0 ppid=8674 pid=8675 auid=4294967295 uid=139 gid=152 euid=139 suid=139 fsuid=139 egid=152 sgid=152 fsgid=152 tty=(none) ses=4294967295 comm="mission-control" exe="/usr/lib/telepathy/mission-control-5" key=(null) type=PROCTITLE msg=audit(1421348296.838:86): proctitle="/usr/lib/telepathy/mission-control-5" type=USER_AUTH msg=audit(1421348304.737:87): pid=8739 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1421348304.737:88): pid=8739 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1421348304.741:89): pid=8739 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="richter" exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_START msg=audit(1421348305.717:90): pid=8739 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="richter" exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1421348305.717:91): pid=8739 uid=0 auid=4294967295 ses=4294967295 msg='uid=1000 exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1421348305.989:92): pid=7688 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="gdm" exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_DISP msg=audit(1421348305.989:93): pid=7688 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="gdm" exe="/usr/lib/gdm/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=AVC msg=audit(1421348309.609:94): apparmor="DENIED" operation="open" profile="/usr/bin/mediascanner-service-2.0" name="/usr/local/lib/libffi.so.6.0.1" pid=8912 comm="mediascanner-se" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421348309.609:94): arch=c000003e syscall=2 success=no exit=-13 a0=7f0c72cdc770 a1=80000 a2=7f0c72c79a18 a3=7f0c71dac06b items=0 ppid=8802 pid=8912 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="mediascanner-se" exe="/usr/bin/mediascanner-service-2.0" key=(null) type=PROCTITLE msg=audit(1421348309.609:94): proctitle="mediascanner-service-2.0" type=ANOM_ABEND msg=audit(1421348322.580:95): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9235 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=ANOM_ABEND msg=audit(1421348324.456:96): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9438 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=ANOM_ABEND msg=audit(1421348326.652:97): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9513 comm="indicator-locat" exe="/usr/lib/x86_64-linux-gnu/indicator-location/indicator-location-service" sig=6 type=AVC msg=audit(1421348341.267:98): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/mission-control-5" name="/usr/local/lib/libffi.so.6.0.1" pid=9795 comm="mission-control" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421348341.267:98): arch=c000003e syscall=2 success=no exit=-13 a0=7fcf9946e770 a1=80000 a2=7fcf9940a4f8 a3=7fcf97fb106b items=0 ppid=9794 pid=9795 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="mission-control" exe="/usr/lib/telepathy/mission-control-5" key=(null) type=PROCTITLE msg=audit(1421348341.267:98): proctitle="/usr/lib/telepathy/mission-control-5" type=USER_AUTH msg=audit(1421348374.214:99): pid=10617 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/19 res=success' type=USER_ACCT msg=audit(1421348374.214:100): pid=10617 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/19 res=success' type=USER_START msg=audit(1421348374.214:101): pid=10617 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/19 res=success' type=USER_ACCT msg=audit(1421348401.963:102): pid=10686 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421348401.963:103): pid=10686 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421348401.963:104): pid=10686 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=1 res=1 type=USER_START msg=audit(1421348401.963:105): pid=10686 uid=0 auid=0 ses=1 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421348404.913:106): pid=10686 uid=0 auid=0 ses=1 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421348404.913:107): pid=10686 uid=0 auid=0 ses=1 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1421348409.974:108): pid=11497 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1421348409.974:109): pid=11497 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421348409.974:110): pid=11497 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1421348580.925:111): pid=10617 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/19 res=success' type=USER_END msg=audit(1421348643.005:112): pid=11497 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1421348656.976:113): pid=13047 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1421348656.980:114): pid=13047 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421348656.980:115): pid=13047 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1421348701.610:116): pid=13090 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421348701.610:117): pid=13090 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421348701.610:118): pid=13090 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=2 res=1 type=USER_START msg=audit(1421348701.610:119): pid=13090 uid=0 auid=0 ses=2 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421348701.610:120): pid=13090 uid=0 auid=0 ses=2 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421348701.610:121): pid=13090 uid=0 auid=0 ses=2 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_START msg=audit(1421348732.716:122): pid=17000 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1421348732.720:123): pid=17000 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421348748.484:124): pid=19767 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1421348748.488:125): pid=19767 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421348753.083:126): pid=20174 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1421348793.134:127): pid=20174 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1421348941.611:128): pid=9277 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421348941.611:129): pid=9277 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421348941.611:130): pid=9277 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=3 res=1 type=USER_START msg=audit(1421348941.611:131): pid=9277 uid=0 auid=0 ses=3 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421348942.042:132): pid=9277 uid=0 auid=0 ses=3 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421348942.042:133): pid=9277 uid=0 auid=0 ses=3 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421349136.489:134): pid=13047 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421349142.765:135): pid=12480 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1421349168.288:136): pid=12480 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1421349288.426:137): pid=13042 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1421349288.426:138): pid=13042 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1421349288.426:139): pid=13042 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1421349289.350:140): pid=13042 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1421349301.049:141): pid=13188 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421349301.049:142): pid=13188 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421349301.049:143): pid=13188 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=4 res=1 type=USER_START msg=audit(1421349301.049:144): pid=13188 uid=0 auid=0 ses=4 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421349301.053:145): pid=13188 uid=0 auid=0 ses=4 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421349301.053:146): pid=13188 uid=0 auid=0 ses=4 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421349421.056:147): pid=13436 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421349421.056:148): pid=13436 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421349421.056:149): pid=13436 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=5 res=1 type=USER_START msg=audit(1421349421.056:150): pid=13436 uid=0 auid=0 ses=5 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421349421.524:151): pid=13436 uid=0 auid=0 ses=5 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421349421.524:152): pid=13436 uid=0 auid=0 ses=5 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421349539.944:153): apparmor="DENIED" operation="open" profile="/usr/bin/evince-thumbnailer" name="/usr/local/lib/libffi.so.6.0.1" pid=13469 comm="evince-thumbnai" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421349539.944:153): arch=c000003e syscall=2 success=no exit=-13 a0=7fa06c3d369a a1=80000 a2=7fa06c370a10 a3=7fa06b06206b items=0 ppid=9480 pid=13469 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="evince-thumbnai" exe="/usr/bin/evince-thumbnailer" key=(null) type=PROCTITLE msg=audit(1421349539.944:153): proctitle=6576696E63652D7468756D626E61696C6572002D73003235360066696C653A2F2F2F686F6D652F726963687465722F4461746569656E2F4B6F6E74616B742F47657363616E6E746573253230446F6B756D656E742E706466002F746D702F2E676E6F6D655F6465736B746F705F7468756D626E61696C2E503636465358 type=USER_ACCT msg=audit(1421349901.530:154): pid=13717 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421349901.530:155): pid=13717 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421349901.530:156): pid=13717 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=6 res=1 type=USER_START msg=audit(1421349901.530:157): pid=13717 uid=0 auid=0 ses=6 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421349901.530:158): pid=13717 uid=0 auid=0 ses=6 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421349901.530:159): pid=13717 uid=0 auid=0 ses=6 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421350501.532:160): pid=14021 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421350501.532:161): pid=14021 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421350501.532:162): pid=14021 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=7 res=1 type=USER_START msg=audit(1421350501.532:163): pid=14021 uid=0 auid=0 ses=7 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421350501.536:164): pid=14021 uid=0 auid=0 ses=7 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421350501.536:165): pid=14021 uid=0 auid=0 ses=7 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421350741.542:166): pid=14138 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421350741.542:167): pid=14138 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421350741.542:168): pid=14138 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=8 res=1 type=USER_START msg=audit(1421350741.542:169): pid=14138 uid=0 auid=0 ses=8 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421350741.710:170): pid=14138 uid=0 auid=0 ses=8 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421350741.710:171): pid=14138 uid=0 auid=0 ses=8 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1421350961.279:172): apparmor="DENIED" operation="open" profile="/usr/bin/evince-thumbnailer" name="/usr/local/lib/libffi.so.6.0.1" pid=14440 comm="evince-thumbnai" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421350961.279:172): arch=c000003e syscall=2 success=no exit=-13 a0=7fc37085e69a a1=80000 a2=7fc3707fba10 a3=7fc36f4ed06b items=0 ppid=9480 pid=14440 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="evince-thumbnai" exe="/usr/bin/evince-thumbnailer" key=(null) type=PROCTITLE msg=audit(1421350961.279:172): proctitle=6576696E63652D7468756D626E61696C6572002D73003235360066696C653A2F2F2F686F6D652F726963687465722F4461746569656E2F4B6F6E74616B742F47455A2F416E74776F7274626F67656E2E706466002F746D702F2E676E6F6D655F6465736B746F705F7468756D626E61696C2E4F57504F5358 type=AVC msg=audit(1421350963.591:173): apparmor="DENIED" operation="open" profile="/usr/bin/evince-thumbnailer" name="/usr/local/lib/libffi.so.6.0.1" pid=14443 comm="evince-thumbnai" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421350963.591:173): arch=c000003e syscall=2 success=no exit=-13 a0=7f9699e7669a a1=80000 a2=7f9699e13a10 a3=7f9698b0506b items=0 ppid=9480 pid=14443 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="evince-thumbnai" exe="/usr/bin/evince-thumbnailer" key=(null) type=PROCTITLE msg=audit(1421350963.591:173): proctitle=6576696E63652D7468756D626E61696C6572002D73003235360066696C653A2F2F2F686F6D652F726963687465722F4461746569656E2F4B6F6E74616B742F47455A2F31362E31322E31342F566F72626568616C747365726B6C25433325413472756E67253230662543332542437225323064656E25323025323252756E6466 type=AVC msg=audit(1421350986.138:174): apparmor="DENIED" operation="open" profile="/usr/bin/evince-thumbnailer" name="/usr/local/lib/libffi.so.6.0.1" pid=14504 comm="evince-thumbnai" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1421350986.138:174): arch=c000003e syscall=2 success=no exit=-13 a0=7fcb0bd2d69a a1=80000 a2=7fcb0bccaa10 a3=7fcb0a9bc06b items=0 ppid=9480 pid=14504 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="evince-thumbnai" exe="/usr/bin/evince-thumbnailer" key=(null) type=PROCTITLE msg=audit(1421350986.138:174): proctitle=6576696E63652D7468756D626E61696C6572002D73003235360066696C653A2F2F2F686F6D652F726963687465722F4461746569656E2F4B6F6E74616B742F47455A2F31362E31322E31342F566F72626568616C747365726B6C25433325413472756E67253230662543332542437225323064656E25323025323252756E6466 type=USER_ACCT msg=audit(1421351101.711:175): pid=14536 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421351101.711:176): pid=14536 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421351101.711:177): pid=14536 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=9 res=1 type=USER_START msg=audit(1421351101.715:178): pid=14536 uid=0 auid=0 ses=9 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421351101.715:179): pid=14536 uid=0 auid=0 ses=9 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421351101.715:180): pid=14536 uid=0 auid=0 ses=9 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421351701.967:181): pid=14919 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421351701.967:182): pid=14919 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421351701.967:183): pid=14919 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=10 res=1 type=USER_START msg=audit(1421351701.967:184): pid=14919 uid=0 auid=0 ses=10 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421351701.971:185): pid=14919 uid=0 auid=0 ses=10 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421351701.971:186): pid=14919 uid=0 auid=0 ses=10 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421352001.977:187): pid=15163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421352001.977:188): pid=15163 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421352001.977:189): pid=15163 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=11 res=1 type=USER_START msg=audit(1421352001.977:190): pid=15163 uid=0 auid=0 ses=11 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421352002.281:191): pid=15163 uid=0 auid=0 ses=11 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421352002.281:192): pid=15163 uid=0 auid=0 ses=11 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421352301.283:193): pid=15347 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421352301.283:194): pid=15347 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421352301.283:195): pid=15347 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=12 res=1 type=USER_START msg=audit(1421352301.283:196): pid=15347 uid=0 auid=0 ses=12 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421352301.283:197): pid=15347 uid=0 auid=0 ses=12 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421352301.283:198): pid=15347 uid=0 auid=0 ses=12 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421352541.288:199): pid=15414 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421352541.288:200): pid=15414 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421352541.288:201): pid=15414 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=13 res=1 type=USER_START msg=audit(1421352541.292:202): pid=15414 uid=0 auid=0 ses=13 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421352541.536:203): pid=15414 uid=0 auid=0 ses=13 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421352541.536:204): pid=15414 uid=0 auid=0 ses=13 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421352661.540:205): pid=15433 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421352661.540:206): pid=15433 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421352661.540:207): pid=15433 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=14 res=1 type=USER_START msg=audit(1421352661.540:208): pid=15433 uid=0 auid=0 ses=14 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421352662.644:209): pid=15433 uid=0 auid=0 ses=14 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421352662.644:210): pid=15433 uid=0 auid=0 ses=14 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421352901.647:211): pid=15501 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421352901.647:212): pid=15501 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421352901.647:213): pid=15501 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=15 res=1 type=USER_START msg=audit(1421352901.647:214): pid=15501 uid=0 auid=0 ses=15 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421352901.647:215): pid=15501 uid=0 auid=0 ses=15 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421352901.647:216): pid=15501 uid=0 auid=0 ses=15 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421353021.654:217): pid=15561 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421353021.654:218): pid=15561 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421353021.654:219): pid=15561 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=16 res=1 type=USER_START msg=audit(1421353021.654:220): pid=15561 uid=0 auid=0 ses=16 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421353021.766:221): pid=15561 uid=0 auid=0 ses=16 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421353021.766:222): pid=15561 uid=0 auid=0 ses=16 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421353501.770:223): pid=16285 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421353501.770:224): pid=16285 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421353501.770:225): pid=16285 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=17 res=1 type=USER_START msg=audit(1421353501.770:226): pid=16285 uid=0 auid=0 ses=17 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421353501.774:227): pid=16285 uid=0 auid=0 ses=17 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421353501.774:228): pid=16285 uid=0 auid=0 ses=17 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421354101.776:229): pid=17219 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421354101.776:230): pid=17219 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421354101.776:231): pid=17219 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=18 res=1 type=USER_START msg=audit(1421354101.776:232): pid=17219 uid=0 auid=0 ses=18 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421354101.776:233): pid=17219 uid=0 auid=0 ses=18 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421354101.776:234): pid=17219 uid=0 auid=0 ses=18 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421354341.778:235): pid=17287 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421354341.778:236): pid=17287 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421354341.778:237): pid=17287 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=19 res=1 type=USER_START msg=audit(1421354341.778:238): pid=17287 uid=0 auid=0 ses=19 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421354342.066:239): pid=17287 uid=0 auid=0 ses=19 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421354342.066:240): pid=17287 uid=0 auid=0 ses=19 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421354701.073:241): pid=17608 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421354701.073:242): pid=17608 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421354701.073:243): pid=17608 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=20 res=1 type=USER_START msg=audit(1421354701.073:244): pid=17608 uid=0 auid=0 ses=20 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421354701.077:245): pid=17608 uid=0 auid=0 ses=20 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421354701.077:246): pid=17608 uid=0 auid=0 ses=20 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421355301.081:247): pid=19540 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421355301.081:248): pid=19540 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421355301.081:249): pid=19540 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=21 res=1 type=USER_START msg=audit(1421355301.081:250): pid=19540 uid=0 auid=0 ses=21 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421355301.085:251): pid=19540 uid=0 auid=0 ses=21 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421355301.085:252): pid=19540 uid=0 auid=0 ses=21 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421355601.089:253): pid=21310 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421355601.089:254): pid=21310 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421355601.089:255): pid=21310 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=22 res=1 type=USER_START msg=audit(1421355601.089:256): pid=21310 uid=0 auid=0 ses=22 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421355601.221:257): pid=21310 uid=0 auid=0 ses=22 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421355601.221:258): pid=21310 uid=0 auid=0 ses=22 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421355901.225:259): pid=23636 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421355901.225:260): pid=23636 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421355901.225:261): pid=23636 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=23 res=1 type=USER_START msg=audit(1421355901.225:262): pid=23636 uid=0 auid=0 ses=23 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421355901.229:263): pid=23636 uid=0 auid=0 ses=23 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421355901.229:264): pid=23636 uid=0 auid=0 ses=23 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421356141.230:265): pid=25287 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421356141.230:266): pid=25287 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421356141.230:267): pid=25287 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=24 res=1 type=USER_START msg=audit(1421356141.234:268): pid=25287 uid=0 auid=0 ses=24 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421356141.534:269): pid=25287 uid=0 auid=0 ses=24 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421356141.534:270): pid=25287 uid=0 auid=0 ses=24 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421356501.538:271): pid=27057 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421356501.538:272): pid=27057 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421356501.538:273): pid=27057 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=25 res=1 type=USER_START msg=audit(1421356501.538:274): pid=27057 uid=0 auid=0 ses=25 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421356501.546:275): pid=27057 uid=0 auid=0 ses=25 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421356501.546:276): pid=27057 uid=0 auid=0 ses=25 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421356621.547:277): pid=27897 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421356621.547:278): pid=27897 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421356621.551:279): pid=27897 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=26 res=1 type=USER_START msg=audit(1421356621.551:280): pid=27897 uid=0 auid=0 ses=26 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421356621.759:281): pid=27897 uid=0 auid=0 ses=26 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421356621.759:282): pid=27897 uid=0 auid=0 ses=26 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421357101.762:283): pid=31247 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421357101.762:284): pid=31247 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421357101.762:285): pid=31247 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=27 res=1 type=USER_START msg=audit(1421357101.762:286): pid=31247 uid=0 auid=0 ses=27 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421357101.770:287): pid=31247 uid=0 auid=0 ses=27 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421357101.770:288): pid=31247 uid=0 auid=0 ses=27 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1421357701.775:289): pid=2457 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421357701.775:290): pid=2457 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421357701.775:291): pid=2457 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=28 res=1 type=USER_START msg=audit(1421357701.775:292): pid=2457 uid=0 auid=0 ses=28 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421357701.775:293): pid=2457 uid=0 auid=0 ses=28 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421357701.775:294): pid=2457 uid=0 auid=0 ses=28 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1421357903.611:295): pid=4004 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success' type=USER_ACCT msg=audit(1421357903.611:296): pid=4004 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success' type=USER_START msg=audit(1421357903.611:297): pid=4004 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success' type=USER_AUTH msg=audit(1421357940.892:298): pid=5319 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/35 res=success' type=USER_ACCT msg=audit(1421357940.892:299): pid=5319 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/35 res=success' type=USER_START msg=audit(1421357940.896:300): pid=5319 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/35 res=success' type=USER_ACCT msg=audit(1421357941.780:301): pid=5376 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421357941.780:302): pid=5376 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421357941.784:303): pid=5376 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=29 res=1 type=USER_START msg=audit(1421357941.784:304): pid=5376 uid=0 auid=0 ses=29 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421357942.176:305): pid=5376 uid=0 auid=0 ses=29 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421357942.176:306): pid=5376 uid=0 auid=0 ses=29 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421357946.728:307): pid=4004 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/24 res=success' type=USER_END msg=audit(1421357965.244:308): pid=5319 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/35 res=success' type=USER_START msg=audit(1421357994.316:309): pid=5690 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/35 res=success' type=USER_END msg=audit(1421357994.320:310): pid=5690 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/35 res=success' type=USER_START msg=audit(1421358012.481:311): pid=5832 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/35 res=success' type=USER_END msg=audit(1421358012.485:312): pid=5832 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/35 res=success' type=USER_AUTH msg=audit(1421358196.951:313): pid=7327 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/19 res=success' type=USER_ACCT msg=audit(1421358196.951:314): pid=7327 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/19 res=success' type=USER_START msg=audit(1421358196.951:315): pid=7327 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/19 res=success' type=USER_ACCT msg=audit(1421358301.180:316): pid=8484 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421358301.180:317): pid=8484 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421358301.180:318): pid=8484 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=30 res=1 type=USER_START msg=audit(1421358301.180:319): pid=8484 uid=0 auid=0 ses=30 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421358301.184:320): pid=8484 uid=0 auid=0 ses=30 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421358301.184:321): pid=8484 uid=0 auid=0 ses=30 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=ANOM_ABEND msg=audit(1421358642.175:322): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=9161 comm="pay-service" exe="/usr/lib/x86_64-linux-gnu/pay-service/pay-service" sig=6 type=USER_ACCT msg=audit(1421358901.188:323): pid=9086 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1421358901.188:324): pid=9086 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1421358901.188:325): pid=9086 uid=0 old-auid=4294967295 auid=0 old-ses=4294967295 ses=31 res=1 type=USER_START msg=audit(1421358901.188:326): pid=9086 uid=0 auid=0 ses=31 msg='op=PAM:session_open acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1421358901.192:327): pid=9086 uid=0 auid=0 ses=31 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1421358901.192:328): pid=9086 uid=0 auid=0 ses=31 msg='op=PAM:session_close acct="root" exe="/usr/sbin/cron" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1421358925.048:329): pid=9985 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:authentication acct="richter" exe="/usr/lib/policykit-1/polkit-agent-helper-1" hostname=? addr=? terminal=pts/36 res=success' type=USER_ACCT msg=audit(1421358925.048:330): pid=9985 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:accounting acct="richter" exe="/usr/lib/policykit-1/polkit-agent-helper-1" hostname=? addr=? terminal=pts/36 res=success' type=USER_START msg=audit(1421358925.104:331): pid=9982 uid=1000 auid=4294967295 ses=4294967295 msg='op=PAM:session_open acct="root" exe="/usr/bin/pkexec" hostname=? addr=? terminal=pts/36 res=success'